='/proc/consoles\x00', 0x0, 0x0) (async) dup3(r5, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000400)={{r0}, r4, 0x4, @unused=[0xfd, 0x1, 0x0, 0x3], @name="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"}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0xf}}, 0x20}}, 0x0) 17:52:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x33}}, 0x0) 17:52:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x100000000000000) 17:52:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x200000000000000) 17:52:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x10}}, 0x20}}, 0x0) 17:52:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x300000000000000) 17:52:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x60}}, 0x20}}, 0x0) 17:52:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 606.281041][T21732] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000140)="0a31958fe03b37b4028e1da9b139c7b71c8ab3db97eee17729b0e8082d4a2016690b274ced57d928528d14f1c458ffe2226646a6b8eb9125004b1577c9c9c1a4") (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:17 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20000) read(r3, &(0x7f0000000100)=""/182, 0xb6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x3b}}, 0x0) 17:52:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}}, 0x0) 17:52:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x400000000000000) 17:52:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x500000000000000) 17:52:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x20}}, 0x0) 17:52:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) 17:52:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x600000000000000) 17:52:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:18 executing program 3: r0 = semget$private(0x0, 0x1, 0x8) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000b80)=""/48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x0, 0x526, 0x1, 0x9, 0x3, "08833beee9c9790e12f0064ba92c545dbf9b00"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) sendmsg$tipc(r5, &(0x7f0000000b40)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000180)="d02657359ee8387bac72680144f1420e4e92ee5b3e574cab2f0fe487c4284756d2cdcf8df512dba0487d699c0dba2de7cbc2621247aaf483f6f91d43903ab45c15a7152b5a90170ecf05d6960e93f15932f54f4f21e27af5efb12debaef55312baa2404fe888955905a5250ffff76547544589eecc61715ab8722371b543e84a2ab57e27149f590ae1a7fdc1f89002b5c588824478c02401ba0ce2b96031a9b879cf261b7f37e695c1758cdeeb321a8479ce91b93d6a167d59727e97fc8287e75dc124a576710fab4a3507100f34b1cbc356722d5011d36c6ecc09474503fb823f33f79bb651e197c60e36", 0xeb}, {&(0x7f0000000280)="2c0a4a13bccf4ed5bdd37a5ba0a67179493a12d9f2c2af457da1d1e6cb3e314d6e3c99550a4e61c89cd06e5ecef1c80976cfade445c6c5082fccebe3c45405dd461a6494cd6c82e6abd28d714400c8afd2a9599e4f3aab49a3c65f04d991b1cbce157b2f06a50e9fed05b0db421da18cc62039432876f147cf2a73e6400dedf290ce1f9f224f0b0a0f8fe3b5b65352e60b17dbcf1499ee80090aba01c2fb80784fe37479cba5ec9d98cc1eeec149f141fedb039e113b14aac8653af64efff07ea99d486593bcdc7ea294879114dd2e", 0xcf}, {&(0x7f0000000400)="2383d472b49d583d31bf35eba94040ec4d820fa68b6eb68ad2e31e9381216d06eca2b61cdfa941cd99602d497bc7d562e1326811b2c1b4fecc8e555c2e5d5f58212d92a18f399bfae99f45596c422f3181b59dbfe60c7f627f06d63215b52f14e782b1e68c144572d387fb0e8d21ad27fad6cad3eef1db2cb6f54745b6088ddb10cad6739f5765a46ae59ab8a6b0b8a6e1ce575f7504bf456054a4bcfed7b69e3bd365a58e471b997819dc870fe49b14b3289f67ce3ef3fe39586e05363549629cee2c1762e7aa580c4d52c40e7fcdd7d9", 0xd1}, {&(0x7f0000000500)="44e3030003d845533535d4658b8aa5253504ab68d1f484cfdde29a30d052ed321d8fa0b81667e2fcf54490633f88b47c4571d8a83aaca113d493aacc16ad72a1d325f710b05530ea2f928a6aa1cca92445e4789832cfa4162483d633", 0x5c}, {&(0x7f0000000580)="2fdd04abfbda7b1a8d7a247f4f31084ee84898577573596d408e49e2d826b2e7cf0ca6b6f46d673742dcf3298df2a55a1330f5b7c9978616e667c681f36b59b001f86080b43eddce401289a3ed5af2718124cf89a23bedba4a15e312d8eecd9a25495c2ae0ff0b8c0b31f0eaca80d49107a5f3a6902b2c92d5096c1450f44621c66d2a178af8460ba59086b348f8f9ee646ffe0adee2fead73e37c4faef7695baffe0dba37ca514d1b73e029277529788da6e7aa6305dd69f61e034a50959230b4c523095c431312265ca303d474f9c9de79ecb9149f5775cfef8513b00362d8bf865500bc5ef0", 0xe7}, {&(0x7f0000000680)="e0aa859c2b466121dd30b2127350b1637f76ffe46c7196c1deb19687f4199557225fd9d29fa9fbd9a569e6f2287b0a0c23c1c8b4c5c42a67eb2cdf0787369ba4061a055cfb259b6d64e4e7b4a353e1821cdf760f014ce681e78089acb61a9807d4cc6d96217690ab392d1a156b264a07e8eb851fc2042343d9cd55319049e9a7743b3306816f295ee45714804565f84e60216b7f1d93781324562596025ea78b3880fbd3a52daedbb39deb12f35499c63dadae1fc3ccdd564b2ac1d32943637c70586078ceddfb0663b1241d6409f4cb2c870af5cd88ee92652d0bb8a99967ced5a28623fa37befce1bd8176209b210af7b8b6fc1460971d6d", 0xf9}, {&(0x7f0000000780)="0d5dab0438e8af9f2f7a3aa730ad0d09b1b40f73c7b783c37f888b4425dd348a57c685e637e401898a92a79b6d47828b0bc3f678f252302bbfd1c78a795d804dd425704f9d8701516841099b3f94678ba89a0b2f4fd331b2ce9df8c16574943de48d82730c878143b92692ca", 0x6c}, {&(0x7f0000000800)="5950cc3e1cdd085bdc7d505394573408952ff9a16e87371d8d6eab4dbc9a4e41af9ed0d832894d62e6ed517bd014d9c57bb78741ec77ed1311da31c36ecbeeeeacade9c56e0c2ceb5583a7250e5b67dbc8e03467226a2b08a09044f1acdfed65af8e7358478e48472d12f327583144b130a96f3ae4b6f608df87d52ee238f559374b7fa3d3e22596cd45c1a5e8146bb5c881c52ba8bd3fb1afeb79d095274bcdf11a81402854e7df19fbdf78486267775e56cc", 0xb3}, {&(0x7f00000008c0)="ee2dac3b0c2e73ef89e311f34de58931887a94b93f58caa4ca8b969d31209a7bc6c729f49e4bb4438dfcd7c2a414f6624d8b642928c75e9cfcf3578c9c93ecd9d4705df92fbed5f11786088d96f001e90b6ceeb44fe8707b9107a772e624607bb7dafa867829f8fd3d2730113a06c5304fece252991239e97955c8e63a75df4d8fa95e0b88bfdfb4fc8d68cf98095ecbeefc155ec0b2aaee559aa4c645", 0x9d}, {&(0x7f0000000380)="7ac20ccb13535e3c757c47ef2a3c4f0ef04acaa5b487ca7a351ff6f8781bcd82c24ec99d3c510caf45c5f695a1bd9b0621762572ffe952385e8b5c", 0x3b}], 0xa, &(0x7f0000000a40)="53def83cfaf39c5886007da91d1b8c69556b5f747cc8cf1cc0e81ff7357efdb081b45faef7f6e5dbfa8784dc674b985477a7e4fb352a9e93a0fa418cab5b1cba2bb7ab74cb773b39882640ab31bf3c175232c3db898cbbb89f36fa0a346ea94ddf12ecbade64d0f70ca905a40c9b0f5aa45c98efe58574e4b325a1dece137d28e6eb95f7815cea55b8fe1d126b695e16b3ace39acc4d03a3567d8bfc568289a34d32a055235b3451ce5005fe62f169c4b27f4277fb04492454493972f6520c16e64d31b53cf08aad2ba2afeb710461cea296573f5d1fa8aa93440bac", 0xdc, 0x1}, 0x840) close_range(r1, 0xffffffffffffffff, 0x0) 17:52:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x20}}, 0x0) 17:52:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}}, 0x0) 17:52:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x700000000000000) 17:52:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20000) read(r3, &(0x7f0000000100)=""/182, 0xb6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x800000000000000) 17:52:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x20}}, 0x0) 17:52:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x900000000000000) 17:52:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x20}}, 0x0) 17:52:19 executing program 3: r0 = semget$private(0x0, 0x1, 0x8) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000b80)=""/48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x0, 0x526, 0x1, 0x9, 0x3, "08833beee9c9790e12f0064ba92c545dbf9b00"}) r3 = syz_open_pts(r2, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (rerun: 32) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async, rerun: 32) sendmsg$tipc(r5, &(0x7f0000000b40)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000180)="d02657359ee8387bac72680144f1420e4e92ee5b3e574cab2f0fe487c4284756d2cdcf8df512dba0487d699c0dba2de7cbc2621247aaf483f6f91d43903ab45c15a7152b5a90170ecf05d6960e93f15932f54f4f21e27af5efb12debaef55312baa2404fe888955905a5250ffff76547544589eecc61715ab8722371b543e84a2ab57e27149f590ae1a7fdc1f89002b5c588824478c02401ba0ce2b96031a9b879cf261b7f37e695c1758cdeeb321a8479ce91b93d6a167d59727e97fc8287e75dc124a576710fab4a3507100f34b1cbc356722d5011d36c6ecc09474503fb823f33f79bb651e197c60e36", 0xeb}, {&(0x7f0000000280)="2c0a4a13bccf4ed5bdd37a5ba0a67179493a12d9f2c2af457da1d1e6cb3e314d6e3c99550a4e61c89cd06e5ecef1c80976cfade445c6c5082fccebe3c45405dd461a6494cd6c82e6abd28d714400c8afd2a9599e4f3aab49a3c65f04d991b1cbce157b2f06a50e9fed05b0db421da18cc62039432876f147cf2a73e6400dedf290ce1f9f224f0b0a0f8fe3b5b65352e60b17dbcf1499ee80090aba01c2fb80784fe37479cba5ec9d98cc1eeec149f141fedb039e113b14aac8653af64efff07ea99d486593bcdc7ea294879114dd2e", 0xcf}, {&(0x7f0000000400)="2383d472b49d583d31bf35eba94040ec4d820fa68b6eb68ad2e31e9381216d06eca2b61cdfa941cd99602d497bc7d562e1326811b2c1b4fecc8e555c2e5d5f58212d92a18f399bfae99f45596c422f3181b59dbfe60c7f627f06d63215b52f14e782b1e68c144572d387fb0e8d21ad27fad6cad3eef1db2cb6f54745b6088ddb10cad6739f5765a46ae59ab8a6b0b8a6e1ce575f7504bf456054a4bcfed7b69e3bd365a58e471b997819dc870fe49b14b3289f67ce3ef3fe39586e05363549629cee2c1762e7aa580c4d52c40e7fcdd7d9", 0xd1}, {&(0x7f0000000500)="44e3030003d845533535d4658b8aa5253504ab68d1f484cfdde29a30d052ed321d8fa0b81667e2fcf54490633f88b47c4571d8a83aaca113d493aacc16ad72a1d325f710b05530ea2f928a6aa1cca92445e4789832cfa4162483d633", 0x5c}, {&(0x7f0000000580)="2fdd04abfbda7b1a8d7a247f4f31084ee84898577573596d408e49e2d826b2e7cf0ca6b6f46d673742dcf3298df2a55a1330f5b7c9978616e667c681f36b59b001f86080b43eddce401289a3ed5af2718124cf89a23bedba4a15e312d8eecd9a25495c2ae0ff0b8c0b31f0eaca80d49107a5f3a6902b2c92d5096c1450f44621c66d2a178af8460ba59086b348f8f9ee646ffe0adee2fead73e37c4faef7695baffe0dba37ca514d1b73e029277529788da6e7aa6305dd69f61e034a50959230b4c523095c431312265ca303d474f9c9de79ecb9149f5775cfef8513b00362d8bf865500bc5ef0", 0xe7}, {&(0x7f0000000680)="e0aa859c2b466121dd30b2127350b1637f76ffe46c7196c1deb19687f4199557225fd9d29fa9fbd9a569e6f2287b0a0c23c1c8b4c5c42a67eb2cdf0787369ba4061a055cfb259b6d64e4e7b4a353e1821cdf760f014ce681e78089acb61a9807d4cc6d96217690ab392d1a156b264a07e8eb851fc2042343d9cd55319049e9a7743b3306816f295ee45714804565f84e60216b7f1d93781324562596025ea78b3880fbd3a52daedbb39deb12f35499c63dadae1fc3ccdd564b2ac1d32943637c70586078ceddfb0663b1241d6409f4cb2c870af5cd88ee92652d0bb8a99967ced5a28623fa37befce1bd8176209b210af7b8b6fc1460971d6d", 0xf9}, {&(0x7f0000000780)="0d5dab0438e8af9f2f7a3aa730ad0d09b1b40f73c7b783c37f888b4425dd348a57c685e637e401898a92a79b6d47828b0bc3f678f252302bbfd1c78a795d804dd425704f9d8701516841099b3f94678ba89a0b2f4fd331b2ce9df8c16574943de48d82730c878143b92692ca", 0x6c}, {&(0x7f0000000800)="5950cc3e1cdd085bdc7d505394573408952ff9a16e87371d8d6eab4dbc9a4e41af9ed0d832894d62e6ed517bd014d9c57bb78741ec77ed1311da31c36ecbeeeeacade9c56e0c2ceb5583a7250e5b67dbc8e03467226a2b08a09044f1acdfed65af8e7358478e48472d12f327583144b130a96f3ae4b6f608df87d52ee238f559374b7fa3d3e22596cd45c1a5e8146bb5c881c52ba8bd3fb1afeb79d095274bcdf11a81402854e7df19fbdf78486267775e56cc", 0xb3}, {&(0x7f00000008c0)="ee2dac3b0c2e73ef89e311f34de58931887a94b93f58caa4ca8b969d31209a7bc6c729f49e4bb4438dfcd7c2a414f6624d8b642928c75e9cfcf3578c9c93ecd9d4705df92fbed5f11786088d96f001e90b6ceeb44fe8707b9107a772e624607bb7dafa867829f8fd3d2730113a06c5304fece252991239e97955c8e63a75df4d8fa95e0b88bfdfb4fc8d68cf98095ecbeefc155ec0b2aaee559aa4c645", 0x9d}, {&(0x7f0000000380)="7ac20ccb13535e3c757c47ef2a3c4f0ef04acaa5b487ca7a351ff6f8781bcd82c24ec99d3c510caf45c5f695a1bd9b0621762572ffe952385e8b5c", 0x3b}], 0xa, &(0x7f0000000a40)="53def83cfaf39c5886007da91d1b8c69556b5f747cc8cf1cc0e81ff7357efdb081b45faef7f6e5dbfa8784dc674b985477a7e4fb352a9e93a0fa418cab5b1cba2bb7ab74cb773b39882640ab31bf3c175232c3db898cbbb89f36fa0a346ea94ddf12ecbade64d0f70ca905a40c9b0f5aa45c98efe58574e4b325a1dece137d28e6eb95f7815cea55b8fe1d126b695e16b3ace39acc4d03a3567d8bfc568289a34d32a055235b3451ce5005fe62f169c4b27f4277fb04492454493972f6520c16e64d31b53cf08aad2ba2afeb710461cea296573f5d1fa8aa93440bac", 0xdc, 0x1}, 0x840) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) 17:52:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x1f000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x20}}, 0x0) 17:52:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0xc0}}, 0x0) 17:52:19 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20000) read(r3, &(0x7f0000000100)=""/182, 0xb6) (async, rerun: 64) r4 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async, rerun: 32) pipe(0x0) (rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xe00000000000000) 17:52:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x3f000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xc}}, 0x20}}, 0x0) 17:52:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0xec0}}, 0x0) 17:52:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xf00000000000000) 17:52:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xe}}, 0x20}}, 0x0) 17:52:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf}}, 0x20}}, 0x0) 17:52:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x3f00000000000000) 17:52:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x840b0000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:20 executing program 3: r0 = semget$private(0x0, 0x1, 0x8) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000b80)=""/48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x0, 0x526, 0x1, 0x9, 0x3, "08833beee9c9790e12f0064ba92c545dbf9b00"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) sendmsg$tipc(r5, &(0x7f0000000b40)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000180)="d02657359ee8387bac72680144f1420e4e92ee5b3e574cab2f0fe487c4284756d2cdcf8df512dba0487d699c0dba2de7cbc2621247aaf483f6f91d43903ab45c15a7152b5a90170ecf05d6960e93f15932f54f4f21e27af5efb12debaef55312baa2404fe888955905a5250ffff76547544589eecc61715ab8722371b543e84a2ab57e27149f590ae1a7fdc1f89002b5c588824478c02401ba0ce2b96031a9b879cf261b7f37e695c1758cdeeb321a8479ce91b93d6a167d59727e97fc8287e75dc124a576710fab4a3507100f34b1cbc356722d5011d36c6ecc09474503fb823f33f79bb651e197c60e36", 0xeb}, {&(0x7f0000000280)="2c0a4a13bccf4ed5bdd37a5ba0a67179493a12d9f2c2af457da1d1e6cb3e314d6e3c99550a4e61c89cd06e5ecef1c80976cfade445c6c5082fccebe3c45405dd461a6494cd6c82e6abd28d714400c8afd2a9599e4f3aab49a3c65f04d991b1cbce157b2f06a50e9fed05b0db421da18cc62039432876f147cf2a73e6400dedf290ce1f9f224f0b0a0f8fe3b5b65352e60b17dbcf1499ee80090aba01c2fb80784fe37479cba5ec9d98cc1eeec149f141fedb039e113b14aac8653af64efff07ea99d486593bcdc7ea294879114dd2e", 0xcf}, {&(0x7f0000000400)="2383d472b49d583d31bf35eba94040ec4d820fa68b6eb68ad2e31e9381216d06eca2b61cdfa941cd99602d497bc7d562e1326811b2c1b4fecc8e555c2e5d5f58212d92a18f399bfae99f45596c422f3181b59dbfe60c7f627f06d63215b52f14e782b1e68c144572d387fb0e8d21ad27fad6cad3eef1db2cb6f54745b6088ddb10cad6739f5765a46ae59ab8a6b0b8a6e1ce575f7504bf456054a4bcfed7b69e3bd365a58e471b997819dc870fe49b14b3289f67ce3ef3fe39586e05363549629cee2c1762e7aa580c4d52c40e7fcdd7d9", 0xd1}, {&(0x7f0000000500)="44e3030003d845533535d4658b8aa5253504ab68d1f484cfdde29a30d052ed321d8fa0b81667e2fcf54490633f88b47c4571d8a83aaca113d493aacc16ad72a1d325f710b05530ea2f928a6aa1cca92445e4789832cfa4162483d633", 0x5c}, {&(0x7f0000000580)="2fdd04abfbda7b1a8d7a247f4f31084ee84898577573596d408e49e2d826b2e7cf0ca6b6f46d673742dcf3298df2a55a1330f5b7c9978616e667c681f36b59b001f86080b43eddce401289a3ed5af2718124cf89a23bedba4a15e312d8eecd9a25495c2ae0ff0b8c0b31f0eaca80d49107a5f3a6902b2c92d5096c1450f44621c66d2a178af8460ba59086b348f8f9ee646ffe0adee2fead73e37c4faef7695baffe0dba37ca514d1b73e029277529788da6e7aa6305dd69f61e034a50959230b4c523095c431312265ca303d474f9c9de79ecb9149f5775cfef8513b00362d8bf865500bc5ef0", 0xe7}, {&(0x7f0000000680)="e0aa859c2b466121dd30b2127350b1637f76ffe46c7196c1deb19687f4199557225fd9d29fa9fbd9a569e6f2287b0a0c23c1c8b4c5c42a67eb2cdf0787369ba4061a055cfb259b6d64e4e7b4a353e1821cdf760f014ce681e78089acb61a9807d4cc6d96217690ab392d1a156b264a07e8eb851fc2042343d9cd55319049e9a7743b3306816f295ee45714804565f84e60216b7f1d93781324562596025ea78b3880fbd3a52daedbb39deb12f35499c63dadae1fc3ccdd564b2ac1d32943637c70586078ceddfb0663b1241d6409f4cb2c870af5cd88ee92652d0bb8a99967ced5a28623fa37befce1bd8176209b210af7b8b6fc1460971d6d", 0xf9}, {&(0x7f0000000780)="0d5dab0438e8af9f2f7a3aa730ad0d09b1b40f73c7b783c37f888b4425dd348a57c685e637e401898a92a79b6d47828b0bc3f678f252302bbfd1c78a795d804dd425704f9d8701516841099b3f94678ba89a0b2f4fd331b2ce9df8c16574943de48d82730c878143b92692ca", 0x6c}, {&(0x7f0000000800)="5950cc3e1cdd085bdc7d505394573408952ff9a16e87371d8d6eab4dbc9a4e41af9ed0d832894d62e6ed517bd014d9c57bb78741ec77ed1311da31c36ecbeeeeacade9c56e0c2ceb5583a7250e5b67dbc8e03467226a2b08a09044f1acdfed65af8e7358478e48472d12f327583144b130a96f3ae4b6f608df87d52ee238f559374b7fa3d3e22596cd45c1a5e8146bb5c881c52ba8bd3fb1afeb79d095274bcdf11a81402854e7df19fbdf78486267775e56cc", 0xb3}, {&(0x7f00000008c0)="ee2dac3b0c2e73ef89e311f34de58931887a94b93f58caa4ca8b969d31209a7bc6c729f49e4bb4438dfcd7c2a414f6624d8b642928c75e9cfcf3578c9c93ecd9d4705df92fbed5f11786088d96f001e90b6ceeb44fe8707b9107a772e624607bb7dafa867829f8fd3d2730113a06c5304fece252991239e97955c8e63a75df4d8fa95e0b88bfdfb4fc8d68cf98095ecbeefc155ec0b2aaee559aa4c645", 0x9d}, {&(0x7f0000000380)="7ac20ccb13535e3c757c47ef2a3c4f0ef04acaa5b487ca7a351ff6f8781bcd82c24ec99d3c510caf45c5f695a1bd9b0621762572ffe952385e8b5c", 0x3b}], 0xa, &(0x7f0000000a40)="53def83cfaf39c5886007da91d1b8c69556b5f747cc8cf1cc0e81ff7357efdb081b45faef7f6e5dbfa8784dc674b985477a7e4fb352a9e93a0fa418cab5b1cba2bb7ab74cb773b39882640ab31bf3c175232c3db898cbbb89f36fa0a346ea94ddf12ecbade64d0f70ca905a40c9b0f5aa45c98efe58574e4b325a1dece137d28e6eb95f7815cea55b8fe1d126b695e16b3ace39acc4d03a3567d8bfc568289a34d32a055235b3451ce5005fe62f169c4b27f4277fb04492454493972f6520c16e64d31b53cf08aad2ba2afeb710461cea296573f5d1fa8aa93440bac", 0xdc, 0x1}, 0x840) close_range(r1, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x8) (async) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000b80)=""/48) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x0, 0x526, 0x1, 0x9, 0x3, "08833beee9c9790e12f0064ba92c545dbf9b00"}) (async) syz_open_pts(r2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$tipc(r5, &(0x7f0000000b40)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000180)="d02657359ee8387bac72680144f1420e4e92ee5b3e574cab2f0fe487c4284756d2cdcf8df512dba0487d699c0dba2de7cbc2621247aaf483f6f91d43903ab45c15a7152b5a90170ecf05d6960e93f15932f54f4f21e27af5efb12debaef55312baa2404fe888955905a5250ffff76547544589eecc61715ab8722371b543e84a2ab57e27149f590ae1a7fdc1f89002b5c588824478c02401ba0ce2b96031a9b879cf261b7f37e695c1758cdeeb321a8479ce91b93d6a167d59727e97fc8287e75dc124a576710fab4a3507100f34b1cbc356722d5011d36c6ecc09474503fb823f33f79bb651e197c60e36", 0xeb}, {&(0x7f0000000280)="2c0a4a13bccf4ed5bdd37a5ba0a67179493a12d9f2c2af457da1d1e6cb3e314d6e3c99550a4e61c89cd06e5ecef1c80976cfade445c6c5082fccebe3c45405dd461a6494cd6c82e6abd28d714400c8afd2a9599e4f3aab49a3c65f04d991b1cbce157b2f06a50e9fed05b0db421da18cc62039432876f147cf2a73e6400dedf290ce1f9f224f0b0a0f8fe3b5b65352e60b17dbcf1499ee80090aba01c2fb80784fe37479cba5ec9d98cc1eeec149f141fedb039e113b14aac8653af64efff07ea99d486593bcdc7ea294879114dd2e", 0xcf}, {&(0x7f0000000400)="2383d472b49d583d31bf35eba94040ec4d820fa68b6eb68ad2e31e9381216d06eca2b61cdfa941cd99602d497bc7d562e1326811b2c1b4fecc8e555c2e5d5f58212d92a18f399bfae99f45596c422f3181b59dbfe60c7f627f06d63215b52f14e782b1e68c144572d387fb0e8d21ad27fad6cad3eef1db2cb6f54745b6088ddb10cad6739f5765a46ae59ab8a6b0b8a6e1ce575f7504bf456054a4bcfed7b69e3bd365a58e471b997819dc870fe49b14b3289f67ce3ef3fe39586e05363549629cee2c1762e7aa580c4d52c40e7fcdd7d9", 0xd1}, {&(0x7f0000000500)="44e3030003d845533535d4658b8aa5253504ab68d1f484cfdde29a30d052ed321d8fa0b81667e2fcf54490633f88b47c4571d8a83aaca113d493aacc16ad72a1d325f710b05530ea2f928a6aa1cca92445e4789832cfa4162483d633", 0x5c}, {&(0x7f0000000580)="2fdd04abfbda7b1a8d7a247f4f31084ee84898577573596d408e49e2d826b2e7cf0ca6b6f46d673742dcf3298df2a55a1330f5b7c9978616e667c681f36b59b001f86080b43eddce401289a3ed5af2718124cf89a23bedba4a15e312d8eecd9a25495c2ae0ff0b8c0b31f0eaca80d49107a5f3a6902b2c92d5096c1450f44621c66d2a178af8460ba59086b348f8f9ee646ffe0adee2fead73e37c4faef7695baffe0dba37ca514d1b73e029277529788da6e7aa6305dd69f61e034a50959230b4c523095c431312265ca303d474f9c9de79ecb9149f5775cfef8513b00362d8bf865500bc5ef0", 0xe7}, {&(0x7f0000000680)="e0aa859c2b466121dd30b2127350b1637f76ffe46c7196c1deb19687f4199557225fd9d29fa9fbd9a569e6f2287b0a0c23c1c8b4c5c42a67eb2cdf0787369ba4061a055cfb259b6d64e4e7b4a353e1821cdf760f014ce681e78089acb61a9807d4cc6d96217690ab392d1a156b264a07e8eb851fc2042343d9cd55319049e9a7743b3306816f295ee45714804565f84e60216b7f1d93781324562596025ea78b3880fbd3a52daedbb39deb12f35499c63dadae1fc3ccdd564b2ac1d32943637c70586078ceddfb0663b1241d6409f4cb2c870af5cd88ee92652d0bb8a99967ced5a28623fa37befce1bd8176209b210af7b8b6fc1460971d6d", 0xf9}, {&(0x7f0000000780)="0d5dab0438e8af9f2f7a3aa730ad0d09b1b40f73c7b783c37f888b4425dd348a57c685e637e401898a92a79b6d47828b0bc3f678f252302bbfd1c78a795d804dd425704f9d8701516841099b3f94678ba89a0b2f4fd331b2ce9df8c16574943de48d82730c878143b92692ca", 0x6c}, {&(0x7f0000000800)="5950cc3e1cdd085bdc7d505394573408952ff9a16e87371d8d6eab4dbc9a4e41af9ed0d832894d62e6ed517bd014d9c57bb78741ec77ed1311da31c36ecbeeeeacade9c56e0c2ceb5583a7250e5b67dbc8e03467226a2b08a09044f1acdfed65af8e7358478e48472d12f327583144b130a96f3ae4b6f608df87d52ee238f559374b7fa3d3e22596cd45c1a5e8146bb5c881c52ba8bd3fb1afeb79d095274bcdf11a81402854e7df19fbdf78486267775e56cc", 0xb3}, {&(0x7f00000008c0)="ee2dac3b0c2e73ef89e311f34de58931887a94b93f58caa4ca8b969d31209a7bc6c729f49e4bb4438dfcd7c2a414f6624d8b642928c75e9cfcf3578c9c93ecd9d4705df92fbed5f11786088d96f001e90b6ceeb44fe8707b9107a772e624607bb7dafa867829f8fd3d2730113a06c5304fece252991239e97955c8e63a75df4d8fa95e0b88bfdfb4fc8d68cf98095ecbeefc155ec0b2aaee559aa4c645", 0x9d}, {&(0x7f0000000380)="7ac20ccb13535e3c757c47ef2a3c4f0ef04acaa5b487ca7a351ff6f8781bcd82c24ec99d3c510caf45c5f695a1bd9b0621762572ffe952385e8b5c", 0x3b}], 0xa, &(0x7f0000000a40)="53def83cfaf39c5886007da91d1b8c69556b5f747cc8cf1cc0e81ff7357efdb081b45faef7f6e5dbfa8784dc674b985477a7e4fb352a9e93a0fa418cab5b1cba2bb7ab74cb773b39882640ab31bf3c175232c3db898cbbb89f36fa0a346ea94ddf12ecbade64d0f70ca905a40c9b0f5aa45c98efe58574e4b325a1dece137d28e6eb95f7815cea55b8fe1d126b695e16b3ace39acc4d03a3567d8bfc568289a34d32a055235b3451ce5005fe62f169c4b27f4277fb04492454493972f6520c16e64d31b53cf08aad2ba2afeb710461cea296573f5d1fa8aa93440bac", 0xdc, 0x1}, 0x840) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 17:52:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x77b9af273318e9c7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffdfffffffff000, 0xfffffffff0000000}]}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x1d0000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="fa84adc766e216400b6dc99c32fa5534b45ad1abe89d368a0955a44970ff319394196fcf1b4ef2c7a0904cc73a6d2c3d508d0bc7b55e3f39eed544c720966b27674d79d598056fabb1a5c362099973b16dda12", 0x53}, {&(0x7f0000000040)="b56c718f73f98c935c488dcc6f948743907e4745e31a2b656dcd1ddb1133111dfcbf1acf70a1e916b29c29", 0x2b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="daf0729e8ab0a84215f6d253d34a01da597fa23dd22c5d33e0a38d6261f176a31b333465274215acbb0731d3853134", 0x2f}, {&(0x7f0000000300)="14ee08eef2213f9c55c05cd79ef2c1ef884d22bb7f62d5bb8fd02558c1ef22f9afe06cf30ff475359de2d6b1bff28a65a87bf632bfd3589c02ab68fc0f80554f3e620ec80784ca4a0bf35f830ad12a4f04b9f68afb0e15560b2516ee5bd82f4c27f0b5c02176bb938f297984b333c443d22f6e8ca3717c3ddb2075f2dcc00ec910b96e0f317df2d25112b7c8a6c01296d8cfb1c0ecce4df6a6b6de3aa877", 0x9e}, {&(0x7f0000000400)="41ba8f0ee20697d91e70fe16ffc53a2874cb03f1ca3d603d0638c8c1e6d962be48510cd23834dad1384a986224fbf866fb565b400ee222af0637c0e7725f4ab861928126b05754572e635147800818b383460cbfeab95f6b81923009cf65567299a86ee84c3c", 0x66}, {&(0x7f0000000480)="cb8236a513ee0d7f5d66227bf032c31b1537f1ca15dc550b6856fec2de5a6493d130c5bcc1c61541e08a25dbcd7942efb5b732fcfb37245479b8ddd3af0de4505d3848e8adf83fad6531d9d12479a51a51491bf6408c4dc1fb8aae75ab6459f520e450888e76d59324f01e6138d945a26f20a8ec36e3f89a95d2acb0ff0048f90334b6b556640f654569867ec2e7186d554b8f6a45fbfdbb95c3b040c8d2a36e1cc050e98319c30273b5e44396616884060d35a1081ade72e5cb34845e56cf0c2186bb89876aae8682bf380f88c1e598eda9d89c13d03d2e1cecc66775309b849f3c2f9324050d1b6b2cf5d81d3167bafb8f", 0xf2}, {&(0x7f0000000580)="978bac10da68087785ce0008d6c08717aa3a8dc50ddbb56917c79d03e97ff5c0e25eae687418bea4e433c4872b67ccba877adfbc119814b8b1ae38ded30b1e3b6304e76d3dbd067e5adba4e12c5a4e302f9d4b978e6499dbe0e069829160b986c1e7489c5853186e7a3a01f1ef3cdde5c9d96f7d7bed84303a347f4de1d472823e57428634e49397d6bc1b532e123251de5fefcc54a5054d01abb0f613b40c0494c71d2e4dee50c8ceda78f1601cb9ba49b4f44591d2c696d4f8ba5d77988036aa0a79c3952ba0d6268ae109b940f9e4da4a4dfe893db0c1397745fffe47ca5398231d95b43c2be2d9d49d609469ea32ec", 0xf1}, {&(0x7f0000000680)="08bb145d1ce67abe48b3db8e8a46c8aa790efb6ff74fd7b8128fccee1a0c57af01a4a668b48b07c9cabd9ae9d5f38b999746108f3a4f1235660e7aee27deb40aa982fbe153ea6a856f9dc71673e90d60e3c2ef690fdf128925531337eee74bf42c287665eadb6dd4eafcc0a5a2c945ba7fdba04f44d3acecb93774a7944145aebed4434b32954f39e3ba52b93bd542c67b3dccde95cd06af139e9539987f37ccac10b20cd9c672d2862b0d6a7632d9a7aa285512315209e93efb610544412d4f071f13ca6ee82cc10c565d46070ab07ff3067d2af0ca189ead0027f60b3d2e6ae1f6647a1bc8fa02b1a577dcdd75df", 0xef}, {&(0x7f0000000780)="3cb10a337a79b6b39d2e62fd69871c32ff13fa4729e8f0ffafe630a736b29f4984e7018a033a0f3137f5528cba7d8fbca55cd77c55e5edb497", 0x39}], 0xa) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x33fe0}}, 0x0) 17:52:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x6000000000000000) 17:52:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x20}}, 0x0) 17:52:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_pts(r3, 0x688a22) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x9effffff00000000) 17:52:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x60}}, 0x20}}, 0x0) 17:52:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xe7030000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x77b9af273318e9c7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffdfffffffff000, 0xfffffffff0000000}]}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x1d0000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="fa84adc766e216400b6dc99c32fa5534b45ad1abe89d368a0955a44970ff319394196fcf1b4ef2c7a0904cc73a6d2c3d508d0bc7b55e3f39eed544c720966b27674d79d598056fabb1a5c362099973b16dda12", 0x53}, {&(0x7f0000000040)="b56c718f73f98c935c488dcc6f948743907e4745e31a2b656dcd1ddb1133111dfcbf1acf70a1e916b29c29", 0x2b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="daf0729e8ab0a84215f6d253d34a01da597fa23dd22c5d33e0a38d6261f176a31b333465274215acbb0731d3853134", 0x2f}, {&(0x7f0000000300)="14ee08eef2213f9c55c05cd79ef2c1ef884d22bb7f62d5bb8fd02558c1ef22f9afe06cf30ff475359de2d6b1bff28a65a87bf632bfd3589c02ab68fc0f80554f3e620ec80784ca4a0bf35f830ad12a4f04b9f68afb0e15560b2516ee5bd82f4c27f0b5c02176bb938f297984b333c443d22f6e8ca3717c3ddb2075f2dcc00ec910b96e0f317df2d25112b7c8a6c01296d8cfb1c0ecce4df6a6b6de3aa877", 0x9e}, {&(0x7f0000000400)="41ba8f0ee20697d91e70fe16ffc53a2874cb03f1ca3d603d0638c8c1e6d962be48510cd23834dad1384a986224fbf866fb565b400ee222af0637c0e7725f4ab861928126b05754572e635147800818b383460cbfeab95f6b81923009cf65567299a86ee84c3c", 0x66}, {&(0x7f0000000480)="cb8236a513ee0d7f5d66227bf032c31b1537f1ca15dc550b6856fec2de5a6493d130c5bcc1c61541e08a25dbcd7942efb5b732fcfb37245479b8ddd3af0de4505d3848e8adf83fad6531d9d12479a51a51491bf6408c4dc1fb8aae75ab6459f520e450888e76d59324f01e6138d945a26f20a8ec36e3f89a95d2acb0ff0048f90334b6b556640f654569867ec2e7186d554b8f6a45fbfdbb95c3b040c8d2a36e1cc050e98319c30273b5e44396616884060d35a1081ade72e5cb34845e56cf0c2186bb89876aae8682bf380f88c1e598eda9d89c13d03d2e1cecc66775309b849f3c2f9324050d1b6b2cf5d81d3167bafb8f", 0xf2}, {&(0x7f0000000580)="978bac10da68087785ce0008d6c08717aa3a8dc50ddbb56917c79d03e97ff5c0e25eae687418bea4e433c4872b67ccba877adfbc119814b8b1ae38ded30b1e3b6304e76d3dbd067e5adba4e12c5a4e302f9d4b978e6499dbe0e069829160b986c1e7489c5853186e7a3a01f1ef3cdde5c9d96f7d7bed84303a347f4de1d472823e57428634e49397d6bc1b532e123251de5fefcc54a5054d01abb0f613b40c0494c71d2e4dee50c8ceda78f1601cb9ba49b4f44591d2c696d4f8ba5d77988036aa0a79c3952ba0d6268ae109b940f9e4da4a4dfe893db0c1397745fffe47ca5398231d95b43c2be2d9d49d609469ea32ec", 0xf1}, {&(0x7f0000000680)="08bb145d1ce67abe48b3db8e8a46c8aa790efb6ff74fd7b8128fccee1a0c57af01a4a668b48b07c9cabd9ae9d5f38b999746108f3a4f1235660e7aee27deb40aa982fbe153ea6a856f9dc71673e90d60e3c2ef690fdf128925531337eee74bf42c287665eadb6dd4eafcc0a5a2c945ba7fdba04f44d3acecb93774a7944145aebed4434b32954f39e3ba52b93bd542c67b3dccde95cd06af139e9539987f37ccac10b20cd9c672d2862b0d6a7632d9a7aa285512315209e93efb610544412d4f071f13ca6ee82cc10c565d46070ab07ff3067d2af0ca189ead0027f60b3d2e6ae1f6647a1bc8fa02b1a577dcdd75df", 0xef}, {&(0x7f0000000780)="3cb10a337a79b6b39d2e62fd69871c32ff13fa4729e8f0ffafe630a736b29f4984e7018a033a0f3137f5528cba7d8fbca55cd77c55e5edb497", 0x39}], 0xa) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x77b9af273318e9c7) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffdfffffffff000, 0xfffffffff0000000}]}) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x1d0000000}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup3(r4, r3, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="fa84adc766e216400b6dc99c32fa5534b45ad1abe89d368a0955a44970ff319394196fcf1b4ef2c7a0904cc73a6d2c3d508d0bc7b55e3f39eed544c720966b27674d79d598056fabb1a5c362099973b16dda12", 0x53}, {&(0x7f0000000040)="b56c718f73f98c935c488dcc6f948743907e4745e31a2b656dcd1ddb1133111dfcbf1acf70a1e916b29c29", 0x2b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="daf0729e8ab0a84215f6d253d34a01da597fa23dd22c5d33e0a38d6261f176a31b333465274215acbb0731d3853134", 0x2f}, {&(0x7f0000000300)="14ee08eef2213f9c55c05cd79ef2c1ef884d22bb7f62d5bb8fd02558c1ef22f9afe06cf30ff475359de2d6b1bff28a65a87bf632bfd3589c02ab68fc0f80554f3e620ec80784ca4a0bf35f830ad12a4f04b9f68afb0e15560b2516ee5bd82f4c27f0b5c02176bb938f297984b333c443d22f6e8ca3717c3ddb2075f2dcc00ec910b96e0f317df2d25112b7c8a6c01296d8cfb1c0ecce4df6a6b6de3aa877", 0x9e}, {&(0x7f0000000400)="41ba8f0ee20697d91e70fe16ffc53a2874cb03f1ca3d603d0638c8c1e6d962be48510cd23834dad1384a986224fbf866fb565b400ee222af0637c0e7725f4ab861928126b05754572e635147800818b383460cbfeab95f6b81923009cf65567299a86ee84c3c", 0x66}, {&(0x7f0000000480)="cb8236a513ee0d7f5d66227bf032c31b1537f1ca15dc550b6856fec2de5a6493d130c5bcc1c61541e08a25dbcd7942efb5b732fcfb37245479b8ddd3af0de4505d3848e8adf83fad6531d9d12479a51a51491bf6408c4dc1fb8aae75ab6459f520e450888e76d59324f01e6138d945a26f20a8ec36e3f89a95d2acb0ff0048f90334b6b556640f654569867ec2e7186d554b8f6a45fbfdbb95c3b040c8d2a36e1cc050e98319c30273b5e44396616884060d35a1081ade72e5cb34845e56cf0c2186bb89876aae8682bf380f88c1e598eda9d89c13d03d2e1cecc66775309b849f3c2f9324050d1b6b2cf5d81d3167bafb8f", 0xf2}, {&(0x7f0000000580)="978bac10da68087785ce0008d6c08717aa3a8dc50ddbb56917c79d03e97ff5c0e25eae687418bea4e433c4872b67ccba877adfbc119814b8b1ae38ded30b1e3b6304e76d3dbd067e5adba4e12c5a4e302f9d4b978e6499dbe0e069829160b986c1e7489c5853186e7a3a01f1ef3cdde5c9d96f7d7bed84303a347f4de1d472823e57428634e49397d6bc1b532e123251de5fefcc54a5054d01abb0f613b40c0494c71d2e4dee50c8ceda78f1601cb9ba49b4f44591d2c696d4f8ba5d77988036aa0a79c3952ba0d6268ae109b940f9e4da4a4dfe893db0c1397745fffe47ca5398231d95b43c2be2d9d49d609469ea32ec", 0xf1}, {&(0x7f0000000680)="08bb145d1ce67abe48b3db8e8a46c8aa790efb6ff74fd7b8128fccee1a0c57af01a4a668b48b07c9cabd9ae9d5f38b999746108f3a4f1235660e7aee27deb40aa982fbe153ea6a856f9dc71673e90d60e3c2ef690fdf128925531337eee74bf42c287665eadb6dd4eafcc0a5a2c945ba7fdba04f44d3acecb93774a7944145aebed4434b32954f39e3ba52b93bd542c67b3dccde95cd06af139e9539987f37ccac10b20cd9c672d2862b0d6a7632d9a7aa285512315209e93efb610544412d4f071f13ca6ee82cc10c565d46070ab07ff3067d2af0ca189ead0027f60b3d2e6ae1f6647a1bc8fa02b1a577dcdd75df", 0xef}, {&(0x7f0000000780)="3cb10a337a79b6b39d2e62fd69871c32ff13fa4729e8f0ffafe630a736b29f4984e7018a033a0f3137f5528cba7d8fbca55cd77c55e5edb497", 0x39}], 0xa) (async) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000000)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xf0ffffff00000000) 17:52:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 17:52:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xe80a0000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x200000ec}}, 0x0) 17:52:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x20}}, 0x0) 17:52:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x77b9af273318e9c7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffdfffffffff000, 0xfffffffff0000000}]}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x1d0000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="fa84adc766e216400b6dc99c32fa5534b45ad1abe89d368a0955a44970ff319394196fcf1b4ef2c7a0904cc73a6d2c3d508d0bc7b55e3f39eed544c720966b27674d79d598056fabb1a5c362099973b16dda12", 0x53}, {&(0x7f0000000040)="b56c718f73f98c935c488dcc6f948743907e4745e31a2b656dcd1ddb1133111dfcbf1acf70a1e916b29c29", 0x2b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="daf0729e8ab0a84215f6d253d34a01da597fa23dd22c5d33e0a38d6261f176a31b333465274215acbb0731d3853134", 0x2f}, {&(0x7f0000000300)="14ee08eef2213f9c55c05cd79ef2c1ef884d22bb7f62d5bb8fd02558c1ef22f9afe06cf30ff475359de2d6b1bff28a65a87bf632bfd3589c02ab68fc0f80554f3e620ec80784ca4a0bf35f830ad12a4f04b9f68afb0e15560b2516ee5bd82f4c27f0b5c02176bb938f297984b333c443d22f6e8ca3717c3ddb2075f2dcc00ec910b96e0f317df2d25112b7c8a6c01296d8cfb1c0ecce4df6a6b6de3aa877", 0x9e}, {&(0x7f0000000400)="41ba8f0ee20697d91e70fe16ffc53a2874cb03f1ca3d603d0638c8c1e6d962be48510cd23834dad1384a986224fbf866fb565b400ee222af0637c0e7725f4ab861928126b05754572e635147800818b383460cbfeab95f6b81923009cf65567299a86ee84c3c", 0x66}, {&(0x7f0000000480)="cb8236a513ee0d7f5d66227bf032c31b1537f1ca15dc550b6856fec2de5a6493d130c5bcc1c61541e08a25dbcd7942efb5b732fcfb37245479b8ddd3af0de4505d3848e8adf83fad6531d9d12479a51a51491bf6408c4dc1fb8aae75ab6459f520e450888e76d59324f01e6138d945a26f20a8ec36e3f89a95d2acb0ff0048f90334b6b556640f654569867ec2e7186d554b8f6a45fbfdbb95c3b040c8d2a36e1cc050e98319c30273b5e44396616884060d35a1081ade72e5cb34845e56cf0c2186bb89876aae8682bf380f88c1e598eda9d89c13d03d2e1cecc66775309b849f3c2f9324050d1b6b2cf5d81d3167bafb8f", 0xf2}, {&(0x7f0000000580)="978bac10da68087785ce0008d6c08717aa3a8dc50ddbb56917c79d03e97ff5c0e25eae687418bea4e433c4872b67ccba877adfbc119814b8b1ae38ded30b1e3b6304e76d3dbd067e5adba4e12c5a4e302f9d4b978e6499dbe0e069829160b986c1e7489c5853186e7a3a01f1ef3cdde5c9d96f7d7bed84303a347f4de1d472823e57428634e49397d6bc1b532e123251de5fefcc54a5054d01abb0f613b40c0494c71d2e4dee50c8ceda78f1601cb9ba49b4f44591d2c696d4f8ba5d77988036aa0a79c3952ba0d6268ae109b940f9e4da4a4dfe893db0c1397745fffe47ca5398231d95b43c2be2d9d49d609469ea32ec", 0xf1}, {&(0x7f0000000680)="08bb145d1ce67abe48b3db8e8a46c8aa790efb6ff74fd7b8128fccee1a0c57af01a4a668b48b07c9cabd9ae9d5f38b999746108f3a4f1235660e7aee27deb40aa982fbe153ea6a856f9dc71673e90d60e3c2ef690fdf128925531337eee74bf42c287665eadb6dd4eafcc0a5a2c945ba7fdba04f44d3acecb93774a7944145aebed4434b32954f39e3ba52b93bd542c67b3dccde95cd06af139e9539987f37ccac10b20cd9c672d2862b0d6a7632d9a7aa285512315209e93efb610544412d4f071f13ca6ee82cc10c565d46070ab07ff3067d2af0ca189ead0027f60b3d2e6ae1f6647a1bc8fa02b1a577dcdd75df", 0xef}, {&(0x7f0000000780)="3cb10a337a79b6b39d2e62fd69871c32ff13fa4729e8f0ffafe630a736b29f4984e7018a033a0f3137f5528cba7d8fbca55cd77c55e5edb497", 0x39}], 0xa) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x77b9af273318e9c7) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffdfffffffff000, 0xfffffffff0000000}]}) (async) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x1d0000000}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup3(r4, r3, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="fa84adc766e216400b6dc99c32fa5534b45ad1abe89d368a0955a44970ff319394196fcf1b4ef2c7a0904cc73a6d2c3d508d0bc7b55e3f39eed544c720966b27674d79d598056fabb1a5c362099973b16dda12", 0x53}, {&(0x7f0000000040)="b56c718f73f98c935c488dcc6f948743907e4745e31a2b656dcd1ddb1133111dfcbf1acf70a1e916b29c29", 0x2b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="daf0729e8ab0a84215f6d253d34a01da597fa23dd22c5d33e0a38d6261f176a31b333465274215acbb0731d3853134", 0x2f}, {&(0x7f0000000300)="14ee08eef2213f9c55c05cd79ef2c1ef884d22bb7f62d5bb8fd02558c1ef22f9afe06cf30ff475359de2d6b1bff28a65a87bf632bfd3589c02ab68fc0f80554f3e620ec80784ca4a0bf35f830ad12a4f04b9f68afb0e15560b2516ee5bd82f4c27f0b5c02176bb938f297984b333c443d22f6e8ca3717c3ddb2075f2dcc00ec910b96e0f317df2d25112b7c8a6c01296d8cfb1c0ecce4df6a6b6de3aa877", 0x9e}, {&(0x7f0000000400)="41ba8f0ee20697d91e70fe16ffc53a2874cb03f1ca3d603d0638c8c1e6d962be48510cd23834dad1384a986224fbf866fb565b400ee222af0637c0e7725f4ab861928126b05754572e635147800818b383460cbfeab95f6b81923009cf65567299a86ee84c3c", 0x66}, {&(0x7f0000000480)="cb8236a513ee0d7f5d66227bf032c31b1537f1ca15dc550b6856fec2de5a6493d130c5bcc1c61541e08a25dbcd7942efb5b732fcfb37245479b8ddd3af0de4505d3848e8adf83fad6531d9d12479a51a51491bf6408c4dc1fb8aae75ab6459f520e450888e76d59324f01e6138d945a26f20a8ec36e3f89a95d2acb0ff0048f90334b6b556640f654569867ec2e7186d554b8f6a45fbfdbb95c3b040c8d2a36e1cc050e98319c30273b5e44396616884060d35a1081ade72e5cb34845e56cf0c2186bb89876aae8682bf380f88c1e598eda9d89c13d03d2e1cecc66775309b849f3c2f9324050d1b6b2cf5d81d3167bafb8f", 0xf2}, {&(0x7f0000000580)="978bac10da68087785ce0008d6c08717aa3a8dc50ddbb56917c79d03e97ff5c0e25eae687418bea4e433c4872b67ccba877adfbc119814b8b1ae38ded30b1e3b6304e76d3dbd067e5adba4e12c5a4e302f9d4b978e6499dbe0e069829160b986c1e7489c5853186e7a3a01f1ef3cdde5c9d96f7d7bed84303a347f4de1d472823e57428634e49397d6bc1b532e123251de5fefcc54a5054d01abb0f613b40c0494c71d2e4dee50c8ceda78f1601cb9ba49b4f44591d2c696d4f8ba5d77988036aa0a79c3952ba0d6268ae109b940f9e4da4a4dfe893db0c1397745fffe47ca5398231d95b43c2be2d9d49d609469ea32ec", 0xf1}, {&(0x7f0000000680)="08bb145d1ce67abe48b3db8e8a46c8aa790efb6ff74fd7b8128fccee1a0c57af01a4a668b48b07c9cabd9ae9d5f38b999746108f3a4f1235660e7aee27deb40aa982fbe153ea6a856f9dc71673e90d60e3c2ef690fdf128925531337eee74bf42c287665eadb6dd4eafcc0a5a2c945ba7fdba04f44d3acecb93774a7944145aebed4434b32954f39e3ba52b93bd542c67b3dccde95cd06af139e9539987f37ccac10b20cd9c672d2862b0d6a7632d9a7aa285512315209e93efb610544412d4f071f13ca6ee82cc10c565d46070ab07ff3067d2af0ca189ead0027f60b3d2e6ae1f6647a1bc8fa02b1a577dcdd75df", 0xef}, {&(0x7f0000000780)="3cb10a337a79b6b39d2e62fd69871c32ff13fa4729e8f0ffafe630a736b29f4984e7018a033a0f3137f5528cba7d8fbca55cd77c55e5edb497", 0x39}], 0xa) (async) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000000)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 610.543340][T21923] tty tty1: ldisc open failed (-12), clearing slot 0 17:52:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_pts(r3, 0x688a22) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xf105000000000000) 17:52:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x600}}, 0x20}}, 0x0) 17:52:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x7ffff000}}, 0x0) 17:52:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 17:52:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xffffff7f00000000) 17:52:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xff000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa31}}, 0x20}}, 0x0) 17:52:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xffffffff00000000) 17:52:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 17:52:22 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_pts(r3, 0x688a22) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0xfffffdef}}, 0x0) 17:52:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0xfffffffffffff000) 17:52:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xe00}}, 0x20}}, 0x0) 17:52:22 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8}, @val={0xc, 0x99, {0x68e, 0x38}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, r4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x10, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 17:52:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 17:52:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x310a}}, 0x20}}, 0x0) 17:52:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x2}, 0x0) 17:52:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 17:52:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8}, @val={0xc, 0x99, {0x68e, 0x38}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x4008000) (async) r4 = socket$packet(0x11, 0x3, 0x300) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, r4) (async) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x10, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 17:52:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x3}, 0x0) 17:52:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x21) mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000002c0)={0x100001, 0x1, 0xa0000, {r2}}, 0x20) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="7c7ea49b2873bfe403af49d42af7ee9ee2baa7d41379e1819d16cbc79b65a883ed5ee4c7d284a9e40b34e6d2b8befa532cffc93e1a13140a7248bf90a6b5af32", 0x40}, {&(0x7f00000001c0)="daea67fb7df22e16865c398e64c8c43535d1849c080b90039905f2f0e011c549082d1cea3cb3b3b57c246e872548ffd0a98339e0f1d03b003891b6a5b0c1cb5dbddbd41942fdd36a", 0x48}], 0x2) syz_open_pts(r2, 0x101180) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, "00e405006c9361eb50c7a6efc663224a9b7b1d"}) r4 = syz_open_pts(r1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) write$FUSE_STATFS(r6, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0x80000000, 0x0, 0x209c, 0xa597, 0x5, 0x2, 0x2, 0x4}}}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) 17:52:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 64) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 17:52:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6558}}, 0x20}}, 0x0) 17:52:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8}, @val={0xc, 0x99, {0x68e, 0x38}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, r4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x10, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r3, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x25}, @val={0x8}, @val={0xc, 0x99, {0x68e, 0x38}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x4008000) (async) socket$packet(0x11, 0x3, 0x300) (async) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, r4) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x10, 0x70bd27, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) 17:52:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x4}, 0x0) 17:52:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 17:52:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 17:52:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="002d8000"], 0x20}}, 0x0) 17:52:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x5}, 0x0) 17:52:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="002d8000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="002d8000"], 0x20}}, 0x0) (async) 17:52:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0) 17:52:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000200,default_permissions,default_permissions,max_read=0x0000000000000005,allow_other,appraise_type=imasig,hash,appra\x00\x00\x00\x00\x00\x00\x00\x00=imasig,\x00']) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28880, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f00000007c0)=""/4096) ppoll(&(0x7f0000000400)=[{r3, 0xc000}, {r2, 0x8000}, {r4, 0x9107}, {r1, 0x1000}, {r5, 0x4}, {r6, 0x2151}, {r3, 0x8}, {r0, 0x8602}, {r7, 0x200}], 0x9, &(0x7f0000000480), &(0x7f00000004c0)={[0x35]}, 0x8) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r8, 0x100000001, 0x0, 0x2811fdff) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x40]}, 0x8) 17:52:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x21) mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000002c0)={0x100001, 0x1, 0xa0000, {r2}}, 0x20) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="7c7ea49b2873bfe403af49d42af7ee9ee2baa7d41379e1819d16cbc79b65a883ed5ee4c7d284a9e40b34e6d2b8befa532cffc93e1a13140a7248bf90a6b5af32", 0x40}, {&(0x7f00000001c0)="daea67fb7df22e16865c398e64c8c43535d1849c080b90039905f2f0e011c549082d1cea3cb3b3b57c246e872548ffd0a98339e0f1d03b003891b6a5b0c1cb5dbddbd41942fdd36a", 0x48}], 0x2) syz_open_pts(r2, 0x101180) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, "00e405006c9361eb50c7a6efc663224a9b7b1d"}) r4 = syz_open_pts(r1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) write$FUSE_STATFS(r6, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0x80000000, 0x0, 0x209c, 0xa597, 0x5, 0x2, 0x2, 0x4}}}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x21) (async) mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000002c0)={0x100001, 0x1, 0xa0000, {r2}}, 0x20) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="7c7ea49b2873bfe403af49d42af7ee9ee2baa7d41379e1819d16cbc79b65a883ed5ee4c7d284a9e40b34e6d2b8befa532cffc93e1a13140a7248bf90a6b5af32", 0x40}, {&(0x7f00000001c0)="daea67fb7df22e16865c398e64c8c43535d1849c080b90039905f2f0e011c549082d1cea3cb3b3b57c246e872548ffd0a98339e0f1d03b003891b6a5b0c1cb5dbddbd41942fdd36a", 0x48}], 0x2) (async) syz_open_pts(r2, 0x101180) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, "00e405006c9361eb50c7a6efc663224a9b7b1d"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) (async) write$FUSE_STATFS(r6, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0x80000000, 0x0, 0x209c, 0xa597, 0x5, 0x2, 0x2, 0x4}}}, 0x60) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) (async) 17:52:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="002d8000"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="002d8000"], 0x20}}, 0x0) (async) 17:52:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}}, 0x0) 17:52:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 613.854534][ T26] audit: type=1400 audit(1644688344.510:750): avc: denied { read } for pid=22062 comm="syz-executor.1" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 613.885167][T22083] fuse: Bad value for 'fd' 17:52:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) 17:52:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 17:52:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x6}, 0x0) 17:52:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000200,default_permissions,default_permissions,max_read=0x0000000000000005,allow_other,appraise_type=imasig,hash,appra\x00\x00\x00\x00\x00\x00\x00\x00=imasig,\x00']) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28880, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f00000007c0)=""/4096) ppoll(&(0x7f0000000400)=[{r3, 0xc000}, {r2, 0x8000}, {r4, 0x9107}, {r1, 0x1000}, {r5, 0x4}, {r6, 0x2151}, {r3, 0x8}, {r0, 0x8602}, {r7, 0x200}], 0x9, &(0x7f0000000480), &(0x7f00000004c0)={[0x35]}, 0x8) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r8, 0x100000001, 0x0, 0x2811fdff) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x40]}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000200,default_permissions,default_permissions,max_read=0x0000000000000005,allow_other,appraise_type=imasig,hash,appra\x00\x00\x00\x00\x00\x00\x00\x00=imasig,\x00']) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28880, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ppoll(&(0x7f0000000400)=[{r3, 0xc000}, {r2, 0x8000}, {r4, 0x9107}, {r1, 0x1000}, {r5, 0x4}, {r6, 0x2151}, {r3, 0x8}, {r0, 0x8602}, {r7, 0x200}], 0x9, &(0x7f0000000480), &(0x7f00000004c0)={[0x35]}, 0x8) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r8, 0x100000001, 0x0, 0x2811fdff) (async) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x40]}, 0x8) (async) 17:52:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) (async) 17:52:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x21) (async, rerun: 64) mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000002c0)={0x100001, 0x1, 0xa0000, {r2}}, 0x20) (rerun: 64) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="7c7ea49b2873bfe403af49d42af7ee9ee2baa7d41379e1819d16cbc79b65a883ed5ee4c7d284a9e40b34e6d2b8befa532cffc93e1a13140a7248bf90a6b5af32", 0x40}, {&(0x7f00000001c0)="daea67fb7df22e16865c398e64c8c43535d1849c080b90039905f2f0e011c549082d1cea3cb3b3b57c246e872548ffd0a98339e0f1d03b003891b6a5b0c1cb5dbddbd41942fdd36a", 0x48}], 0x2) syz_open_pts(r2, 0x101180) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, "00e405006c9361eb50c7a6efc663224a9b7b1d"}) (rerun: 32) r4 = syz_open_pts(r1, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) (async) write$FUSE_STATFS(r6, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0x80000000, 0x0, 0x209c, 0xa597, 0x5, 0x2, 0x2, 0x4}}}, 0x60) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x840, 0x0) 17:52:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 17:52:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 614.415092][T22139] fuse: Bad value for 'fd' 17:52:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x0) 17:52:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r7, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20004801) (async) 17:52:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x9, 0x3, 0x1, 0x1}, 0x8) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) write$rfkill(r2, &(0x7f0000000940)={0x10000, 0x1, 0x2, 0x1}, 0x8) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x8, 0x2, 0x1, 0x1}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000200)=""/14, 0xe}], 0x7, &(0x7f00000007c0)=""/251, 0xfb}, 0x101) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r4 = syz_open_pts(r3, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) r5 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000200,default_permissions,default_permissions,max_read=0x0000000000000005,allow_other,appraise_type=imasig,hash,appra\x00\x00\x00\x00\x00\x00\x00\x00=imasig,\x00']) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28880, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ppoll(&(0x7f0000000400)=[{r3, 0xc000}, {r2, 0x8000}, {r4, 0x9107}, {r1, 0x1000}, {r5, 0x4}, {r6, 0x2151}, {r3, 0x8}, {r0, 0x8602}, {r7, 0x200}], 0x9, &(0x7f0000000480), &(0x7f00000004c0)={[0x35]}, 0x8) (async) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r8, 0x100000001, 0x0, 0x2811fdff) (async) epoll_pwait(r8, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f0000000100)={[0x40]}, 0x8) 17:52:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0x20}}, 0x0) 17:52:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x7}, 0x0) 17:52:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20}}, 0x0) 17:52:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:52:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x4168) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x12}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 17:52:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x9, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x4168) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x12}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x4168) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x12}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}}, 0x20}}, 0x0) 17:52:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:52:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x8}, 0x0) 17:52:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x9, 0x3, 0x1, 0x1}, 0x8) (async) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) write$rfkill(r2, &(0x7f0000000940)={0x10000, 0x1, 0x2, 0x1}, 0x8) (async) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x8, 0x2, 0x1, 0x1}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) (async) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000200)=""/14, 0xe}], 0x7, &(0x7f00000007c0)=""/251, 0xfb}, 0x101) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r4 = syz_open_pts(r3, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x4168) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x12}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESHEX], 0x4168) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x12}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}}, 0x20}}, 0x0) 17:52:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCXONC(r4, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) syz_open_pts(r6, 0x54501) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 17:52:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}}, 0x20}}, 0x0) [ 615.913785][T12254] Bluetooth: hci3: command 0x0406 tx timeout 17:52:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x9}, 0x0) 17:52:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x60, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:26 executing program 2: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) r1 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r1, 0x9) waitid(0x1, r1, &(0x7f00000004c0), 0x0, &(0x7f0000001380)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) waitid(0x2, r1, &(0x7f0000001440), 0x1, &(0x7f00000014c0)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000032cce722ac53f0b30d7ca22a909a8df84157042899a99c8bfd5cafc992a9ae9c7d221ad2", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r3], 0xba4}, 0x1, 0x0, 0x0, 0x8000044}, 0x40800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='!\x00FW', @ANYBLOB="ffb7b8a428fb0b824324daf70403379a3d786102f01ed4c0cd27ab4cc5a7daf4555738ab04da7d81459b89d95eb72c203b0e3ed0b5e2f063a8ac47c9f81e89f26b3b4619f882095e4d354a0069a14d61dade0940e481adafd9eb30c55edea41b9d3ceb9b5bfcdcf8191fe0d54ab4753a1f54e197e2a309aed31bc694258ffdfa69d831f9e1a8641de4e136cca07c25e43a09813ef970ca03c17e849a23b9ebeaf84401816ec8542d56993b5ec378cdc7229d3f6ce13646775f8525", @ANYBLOB="810c00000000000000003f000000080003008559fd8555062e1010651348a69c07094f5641948d2d3ba8e85b2ac59c8229d6229c7ad3336ba384296974d74ddf162486f830afb6df1ac7a612cc692de8ee023f6388f54d05a63a10ed7b82fbc02f2f7578d8d9021dfa668d555b05b462324c8792010541d2560ace224553794dfe98b801a46cc075f098a4e9ffddab14643f44e760c25e151fb90b5b7073a19a7ba88379267fb535227042f6361f7feca354ba29e77cd04601dcd374af123cd00fe41b92c8eed5ce12a02e5e3a2a33216801e48e3d352593f0ea59f85dd4a30800000000000000a14f61e12b88c70dac926093991747677517e6c853c32ae4fdd5aec901569e89dcae160b59aafe7c6f0288d29625bd5a37902ed02b361542645ae20124ca49243f5f8e6ccfb4cbe0930aa4000000", @ANYRES32=r6, @ANYBLOB="04002d80"], 0x20}}, 0x48800) 17:52:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 17:52:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x9, 0x3, 0x1, 0x1}, 0x8) (async) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000900), 0x100, 0x0) write$rfkill(r2, &(0x7f0000000940)={0x10000, 0x1, 0x2, 0x1}, 0x8) (async) write$rfkill(r1, &(0x7f0000000100)={0x5, 0x8, 0x2, 0x1, 0x1}, 0x8) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) (async) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000200)=""/14, 0xe}], 0x7, &(0x7f00000007c0)=""/251, 0xfb}, 0x101) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r4 = syz_open_pts(r3, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}}, 0x20}}, 0x0) 17:52:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0xa}, 0x0) 17:52:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCXONC(r4, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) syz_open_pts(r6, 0x54501) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCXONC(r4, 0x540a, 0x3) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) syz_open_pts(r6, 0x54501) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:27 executing program 2: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) r1 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r1, 0x9) waitid(0x1, r1, &(0x7f00000004c0), 0x0, &(0x7f0000001380)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) waitid(0x2, r1, &(0x7f0000001440), 0x1, &(0x7f00000014c0)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000032cce722ac53f0b30d7ca22a909a8df84157042899a99c8bfd5cafc992a9ae9c7d221ad2", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r3], 0xba4}, 0x1, 0x0, 0x0, 0x8000044}, 0x40800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='!\x00FW', @ANYBLOB="ffb7b8a428fb0b824324daf70403379a3d786102f01ed4c0cd27ab4cc5a7daf4555738ab04da7d81459b89d95eb72c203b0e3ed0b5e2f063a8ac47c9f81e89f26b3b4619f882095e4d354a0069a14d61dade0940e481adafd9eb30c55edea41b9d3ceb9b5bfcdcf8191fe0d54ab4753a1f54e197e2a309aed31bc694258ffdfa69d831f9e1a8641de4e136cca07c25e43a09813ef970ca03c17e849a23b9ebeaf84401816ec8542d56993b5ec378cdc7229d3f6ce13646775f8525", @ANYBLOB="810c00000000000000003f000000080003008559fd8555062e1010651348a69c07094f5641948d2d3ba8e85b2ac59c8229d6229c7ad3336ba384296974d74ddf162486f830afb6df1ac7a612cc692de8ee023f6388f54d05a63a10ed7b82fbc02f2f7578d8d9021dfa668d555b05b462324c8792010541d2560ace224553794dfe98b801a46cc075f098a4e9ffddab14643f44e760c25e151fb90b5b7073a19a7ba88379267fb535227042f6361f7feca354ba29e77cd04601dcd374af123cd00fe41b92c8eed5ce12a02e5e3a2a33216801e48e3d352593f0ea59f85dd4a30800000000000000a14f61e12b88c70dac926093991747677517e6c853c32ae4fdd5aec901569e89dcae160b59aafe7c6f0288d29625bd5a37902ed02b361542645ae20124ca49243f5f8e6ccfb4cbe0930aa4000000", @ANYRES32=r6, @ANYBLOB="04002d80"], 0x20}}, 0x48800) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) (async) getpgid(0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) (async) ptrace$peekuser(0x3, r1, 0x9) (async) waitid(0x1, r1, &(0x7f00000004c0), 0x0, &(0x7f0000001380)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) waitid(0x2, r1, &(0x7f0000001440), 0x1, &(0x7f00000014c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000032cce722ac53f0b30d7ca22a909a8df84157042899a99c8bfd5cafc992a9ae9c7d221ad2", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r3], 0xba4}, 0x1, 0x0, 0x0, 0x8000044}, 0x40800) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='!\x00FW', @ANYBLOB="ffb7b8a428fb0b824324daf70403379a3d786102f01ed4c0cd27ab4cc5a7daf4555738ab04da7d81459b89d95eb72c203b0e3ed0b5e2f063a8ac47c9f81e89f26b3b4619f882095e4d354a0069a14d61dade0940e481adafd9eb30c55edea41b9d3ceb9b5bfcdcf8191fe0d54ab4753a1f54e197e2a309aed31bc694258ffdfa69d831f9e1a8641de4e136cca07c25e43a09813ef970ca03c17e849a23b9ebeaf84401816ec8542d56993b5ec378cdc7229d3f6ce13646775f8525", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="04002d80"], 0x20}}, 0x48800) (async) 17:52:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 17:52:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0xfff, 0x20000000, 0x9, 0x2, "a88b6ded35eec99971fb9178b0b0e338eabc92"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000001c0)={0x4, 0x3, 0x17, 0x3, 0x2, 0x4, 0x0, 0x53, 0x1}) 17:52:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0xc}, 0x0) 17:52:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 17:52:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x3e7, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 616.986933][T22301] warn_alloc: 4 callbacks suppressed [ 616.986948][T22301] syz-executor.2: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 17:52:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) 17:52:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0xd}, 0x0) 17:52:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x20}}, 0x0) [ 617.373503][T22301] CPU: 1 PID: 22301 Comm: syz-executor.2 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 617.384064][T22301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.394137][T22301] Call Trace: [ 617.397429][T22301] [ 617.400371][T22301] dump_stack_lvl+0xcd/0x134 [ 617.404985][T22301] warn_alloc.cold+0x9b/0x189 [ 617.409689][T22301] ? zone_watermark_ok_safe+0x290/0x290 [ 617.415255][T22301] ? __vmalloc_node_range+0x7bf/0x1060 [ 617.420740][T22301] __vmalloc_node_range+0xe1e/0x1060 [ 617.426048][T22301] ? vfree_atomic+0xe0/0xe0 [ 617.430566][T22301] ? rcu_read_lock_sched_held+0x3a/0x70 [ 617.436166][T22301] ? kmem_cache_alloc_node+0x3ce/0x590 [ 617.441641][T22301] ? kernel_clone+0xe7/0xab0 [ 617.446245][T22301] copy_process+0x926/0x7300 [ 617.451983][T22301] ? kernel_clone+0xe7/0xab0 [ 617.456761][T22301] ? lock_chain_count+0x20/0x20 [ 617.461626][T22301] ? lock_chain_count+0x20/0x20 [ 617.466491][T22301] ? find_held_lock+0x2d/0x110 [ 617.471274][T22301] ? __cleanup_sighand+0xb0/0xb0 [ 617.476224][T22301] ? lock_downgrade+0x6e0/0x6e0 [ 617.481100][T22301] ? __lock_acquire+0x1655/0x5470 [ 617.486141][T22301] ? kernel_clone+0x314/0xab0 [ 617.490833][T22301] kernel_clone+0xe7/0xab0 [ 617.495285][T22301] ? create_io_thread+0xf0/0xf0 [ 617.500148][T22301] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 617.506140][T22301] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 617.512137][T22301] ? find_held_lock+0x2d/0x110 [ 617.516915][T22301] __do_sys_clone+0xc8/0x110 [ 617.521517][T22301] ? kernel_clone+0xab0/0xab0 [ 617.526355][T22301] ? lock_downgrade+0x6e0/0x6e0 [ 617.531220][T22301] ? syscall_enter_from_user_mode+0x21/0x70 [ 617.537179][T22301] do_syscall_64+0x35/0xb0 [ 617.541609][T22301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 617.547528][T22301] RIP: 0033:0x7fb807326481 [ 617.551950][T22301] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 617.571746][T22301] RSP: 002b:00007ffd7dc9d9b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 617.580189][T22301] RAX: ffffffffffffffda RBX: 00007fb805b50700 RCX: 00007fb807326481 [ 617.588181][T22301] RDX: 00007fb805b509d0 RSI: 00007fb805b502f0 RDI: 00000000003d0f00 [ 617.596164][T22301] RBP: 00007ffd7dc9dc00 R08: 00007fb805b50700 R09: 00007fb805b50700 [ 617.604144][T22301] R10: 00007fb805b509d0 R11: 0000000000000206 R12: 00007ffd7dc9da6e [ 617.612122][T22301] R13: 00007ffd7dc9da6f R14: 00007fb805b50300 R15: 0000000000022000 [ 617.620106][T22301] [ 617.633387][T22301] Mem-Info: [ 617.636951][T22301] active_anon:4521 inactive_anon:152595 isolated_anon:0 [ 617.636951][T22301] active_file:4892 inactive_file:7538 isolated_file:0 [ 617.636951][T22301] unevictable:768 dirty:47 writeback:0 [ 617.636951][T22301] slab_reclaimable:21715 slab_unreclaimable:116267 [ 617.636951][T22301] mapped:27607 shmem:6024 pagetables:885 bounce:0 [ 617.636951][T22301] kernel_misc_reclaimable:0 [ 617.636951][T22301] free:1295882 free_pcp:8378 free_cma:0 17:52:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x600, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 617.702112][T22301] Node 0 active_anon:18076kB inactive_anon:609468kB active_file:19496kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110428kB dirty:184kB writeback:0kB shmem:21620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB kernel_stack:10680kB pagetables:3544kB all_unreclaimable? no [ 617.779099][T22301] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 617.831440][T22301] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.884848][T22301] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 617.890895][T22301] Node 0 DMA32 free:1219020kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18076kB inactive_anon:607320kB active_file:19496kB inactive_file:30152kB unevictable:1536kB writepending:184kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:37184kB local_pcp:15052kB free_cma:0kB [ 617.935909][T22301] lowmem_reserve[]: 0 0 0 0 0 [ 617.941509][T22301] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.983835][T22301] lowmem_reserve[]: 0 0 0 0 0 [ 617.988598][T22301] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.029937][T22301] lowmem_reserve[]: 0 0 0 0 0 [ 618.037009][T22301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 618.050443][T22301] Node 0 DMA32: 2053*4kB (UME) 913*8kB (UME) 890*16kB (UME) 497*32kB (UME) 176*64kB (UME) 59*128kB (UME) 23*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 277*4096kB (UM) = 1221340kB [ 618.070250][T22301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 618.082111][T22301] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 618.100398][T22301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 618.110335][T22301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 618.120223][T22301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:52:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa31}}, 0x20}}, 0x0) 17:52:28 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCXONC(r4, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) syz_open_pts(r6, 0x54501) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCXONC(r4, 0x540a, 0x3) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) syz_open_pts(r6, 0x54501) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0xe}, 0x0) 17:52:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x700, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:28 executing program 2: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) r1 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r1, 0x9) waitid(0x1, r1, &(0x7f00000004c0), 0x0, &(0x7f0000001380)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) waitid(0x2, r1, &(0x7f0000001440), 0x1, &(0x7f00000014c0)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000032cce722ac53f0b30d7ca22a909a8df84157042899a99c8bfd5cafc992a9ae9c7d221ad2", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r3], 0xba4}, 0x1, 0x0, 0x0, 0x8000044}, 0x40800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='!\x00FW', @ANYBLOB="ffb7b8a428fb0b824324daf70403379a3d786102f01ed4c0cd27ab4cc5a7daf4555738ab04da7d81459b89d95eb72c203b0e3ed0b5e2f063a8ac47c9f81e89f26b3b4619f882095e4d354a0069a14d61dade0940e481adafd9eb30c55edea41b9d3ceb9b5bfcdcf8191fe0d54ab4753a1f54e197e2a309aed31bc694258ffdfa69d831f9e1a8641de4e136cca07c25e43a09813ef970ca03c17e849a23b9ebeaf84401816ec8542d56993b5ec378cdc7229d3f6ce13646775f8525", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="04002d80"], 0x20}}, 0x48800) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) (async) getpgid(0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) (async) ptrace$peekuser(0x3, r1, 0x9) (async) waitid(0x1, r1, &(0x7f00000004c0), 0x0, &(0x7f0000001380)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) waitid(0x2, r1, &(0x7f0000001440), 0x1, &(0x7f00000014c0)) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000000032cce722ac53f0b30d7ca22a909a8df84157042899a99c8bfd5cafc992a9ae9c7d221ad2", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES64=r3], 0xba4}, 0x1, 0x0, 0x0, 0x8000044}, 0x40800) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='!\x00FW', @ANYBLOB="ffb7b8a428fb0b824324daf70403379a3d786102f01ed4c0cd27ab4cc5a7daf4555738ab04da7d81459b89d95eb72c203b0e3ed0b5e2f063a8ac47c9f81e89f26b3b4619f882095e4d354a0069a14d61dade0940e481adafd9eb30c55edea41b9d3ceb9b5bfcdcf8191fe0d54ab4753a1f54e197e2a309aed31bc694258ffdfa69d831f9e1a8641de4e136cca07c25e43a09813ef970ca03c17e849a23b9ebeaf84401816ec8542d56993b5ec378cdc7229d3f6ce13646775f8525", @ANYBLOB="810c00000000000000003f000000080003008559fd8555062e1010651348a69c07094f5641948d2d3ba8e85b2ac59c8229d6229c7ad3336ba384296974d74ddf162486f830afb6df1ac7a612cc692de8ee023f6388f54d05a63a10ed7b82fbc02f2f7578d8d9021dfa668d555b05b462324c8792010541d2560ace224553794dfe98b801a46cc075f098a4e9ffddab14643f44e760c25e151fb90b5b7073a19a7ba88379267fb535227042f6361f7feca354ba29e77cd04601dcd374af123cd00fe41b92c8eed5ce12a02e5e3a2a33216801e48e3d352593f0ea59f85dd4a30800000000000000a14f61e12b88c70dac926093991747677517e6c853c32ae4fdd5aec901569e89dcae160b59aafe7c6f0288d29625bd5a37902ed02b361542645ae20124ca49243f5f8e6ccfb4cbe0930aa4000000", @ANYRES32=r6, @ANYBLOB="04002d80"], 0x20}}, 0x48800) (async) 17:52:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0xfff, 0x20000000, 0x9, 0x2, "a88b6ded35eec99971fb9178b0b0e338eabc92"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000001c0)={0x4, 0x3, 0x17, 0x3, 0x2, 0x4, 0x0, 0x53, 0x1}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0xfff, 0x20000000, 0x9, 0x2, "a88b6ded35eec99971fb9178b0b0e338eabc92"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000001c0)={0x4, 0x3, 0x17, 0x3, 0x2, 0x4, 0x0, 0x53, 0x1}) (async) [ 618.130068][T22301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 618.139574][T22301] 18455 total pagecache pages [ 618.144522][T22301] 0 pages in swap cache [ 618.148735][T22301] Swap cache stats: add 0, delete 0, find 0/0 [ 618.155202][T22301] Free swap = 0kB [ 618.159044][T22301] Total swap = 0kB [ 618.162830][T22301] 2097051 pages RAM [ 618.166751][T22301] 0 pages HighMem/MovableOnly [ 618.171495][T22301] 384533 pages reserved [ 618.175842][T22301] 0 pages cma reserved 17:52:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x900, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 17:52:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xae8, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 618.505633][T22388] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b000002", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}}, 0x20}}, 0x0) 17:52:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xb84, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x21}, 0x0) 17:52:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 17:52:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b000002", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b000002", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) (async) 17:52:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0xfff, 0x20000000, 0x9, 0x2, "a88b6ded35eec99971fb9178b0b0e338eabc92"}) (async) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) (async) close_range(r0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000001c0)={0x4, 0x3, 0x17, 0x3, 0x2, 0x4, 0x0, 0x53, 0x1}) 17:52:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xc00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x310a}}, 0x20}}, 0x0) 17:52:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b000002", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b000002", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) (async) 17:52:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 17:52:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x26}, 0x0) 17:52:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:29 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20103, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "1692b3a50117d89185f4daf3cb8f0227055b59cf42e7b8b5eab22ed5f847061541ef0c5eca73c17c0ae863f2f0b48f28e3ffb1366618f63fdee72d9d9ddf6534e2f923ef97285cbf141dba0d19e7ebda1949d8517db2f9e6106e167d44586cae0ca5b80fa2227b3e864fcb11692f2081716435c768ca69122859b80dbf1ed951664730a1a7fbc41333087989dfc89f9cbda871961d8d722ea7c033631f63996eab0e870b449627f0426a7aabd549a4aeef8f582fe9be24b165069e62220f98e90fef73fef9cbdcd6fee95e34c48d4eb939f23836209cbbdf4acc5c85c746154b18e2769377f27c21f1dddd129a453a1f6f5a9d60c65ad12086b25da89853e04ab7ae471d5531651eee5661e982baeed844ae2e5b703170da9e0cf785ae2e2ce35e857e226a9350f0a79aa59af5b6a87bd652a8c92fd2b966b679ffdd2215a646b21b12587a9a369ed8867a96c6153d739706bdd5bd9bfc06a52507bbccdc498d7a147fea43cf60366c8e8fe0d3c7b93068cdfccc29570d35ad916ce03ccbfea3131b9df6640053982e5e58c3a6ee45506ad66765f5d2a4ed6ef49dba66a4cfbfc9a69bd8f2003a32aabdfb5c71e316dbb6d6362e3745794b6dc67afc43f4e76744194efe8a24151fe1a7f7bbed5047b4d27668281bb3dc5880ffe72887b4de09ef3c6eb29d37f003e5d530c10379ad2036ec7646d2008fa21bc6012a10492c9792e23c49e3736a3a7b161cf86c06798db9f56ded15ef6e96798ceea40f7d48f80e0e7236f57ad5aa6d878c646844e76306d56088f2d096541305872864dffdc2c89a616dbbe3d70240c53eccc4e8e6517ee0fa21cf9f68ab46b3935db4d63653064bacbeec952d81fa8018d24ace034fe9d4e3c2d1fc844ae99a638828d9dcfb20752bc740ebd3171d10845d94cbf4e2a3c552040e5b4032805bfcf5a30c22284a8ec5fe8e5192b80a2901b7a1517ee909a1f8198bece64aa0c03b3fb4dd9222816ee5d851b383ff9b39d8e42b637659cc7ae0b6c8f3363e7899b4b7d9c6a2aefb03181024dfc61060fa89c7f127519bb160d38c40106698c418384f259ce7582ebdf7bbddfaf0d20c9571d773b4f81c27eb1226070725cf401a783f0805ef897c2df466b9f1c66d80d7c1b3315d3681eb474492d2b15a2076ca0d54ab7d8f00457d68d87a6ef18732f118216e9ffe6c1c66fa28c88d045db49d6dd61fa5329effc5fe505235be5602a89d1617a3ae7b0135a61cef5c70cb8ef206c70177b162d468f64e5622ec2be58e35593ed155b24dc83e5a99fa518a901ceda7723b11a6feb51dcc9e45fa18b9fbf2c20be080ba2e0763839a8b5838dd11e4ce93eadff9fd898c3ce9ec2253d82fa10e066e0efaef7d3b0e305ee83091071914af2a068a74697045b71c8c649cd15d5ba51f170d8463690ee3c9cc3505feb4ef6bc1e61b424d39c68d7a421056bf74aa333b789e2e65ec2f0057455e998791b4cb5b1b3d3575ea9c4a1d27067737d5669050bac200e5560f1a954a466c67004867106726be5af9e2c9c3b53ff5a78b10cd599ec6ecbcc33bd80a100c4d341b296b9b37904f59afdd9b32c78074d196dadd9932ec936cb3133fc1cb37e3f04cac945f9cbd89736b9c96c507dd531a576e0be9dbb73735f0e91eec7700316db79a383b931e4cae36f93e71fc914fcee8b28f598c9087f8d6ed6c07f041cc4c58a79842338705dbc55019c80d53b9f6e42e9c973ac9cde04c5e386d360bee3cb7c9e8e3692e701b457bf9047606411564aee0a40caa4fc66d7fa1f74f0cc098c70068c747619b4a61f75f7581d65e07b55541e9aaf0bc3a67c5b274c5e2d191ff2987c55dfa0c143e3de28457e097726bbd1742b4e8b7162cb290805ba0a02ceeaf2d32feb5c519f57aeee1a6ab41f62ef170b9ab188792e639f2305c79572ef7b0adb5b1cc83e377a135c9dc1da1bf0b8fdd64b75e7c617fb7e5c102089aed119edfcd23af1987d36c05052e4b0ea5a37e0acbe18704ce063e4df0e67ea7606f02ec9ae92035a00d6a571073a9f24a8f263936a8af8447d6fe8643ceb12fbda50858c2f78c56854829222a5ef3ea6963704a47bd35bcabf7b5ac89939b45c0bde5a64df90f31c42fa28025991c9a2396f59a3e95b6f6ae76de754b8e06232ebdd7e9f24a105f6d930cc49b100807b25bd3e0e8827668ffcefb83b7ae5fe843d5484021e3a77a497650b1d50dc79d1272a0059796c04d7848236e9ccab5e8e8b0871be71ecc2951275be3cf1ce5f871fe8894cf443f83182e27d844ba16aba9f5e699b256d4ee66c05874b43440b239ccd92aec2553e031701378f87b2776a43373d7eaf9a1edd466fecad40cc879406f53a2ef999024946f97ee024f4c9bb20fee0b8e71f1a0e1feb0cf02022fdc2533713d5b8a60d5ddf9dbe675671dc1de0d73fac171c7f709342471304ec44383c59783a28aae8bf9099887ebee6142e33616f7d0e60546a828488e7bb467e7b69c2ec8cf8105314422ad4e8ef726cb8a51bdcf312d5de2642da7b54f72dcded50be14c307682d203365bff13b5dddc556059f415146f87512e4fe7c3910a6855cc7271e07bebb088c6a7afbee8e1b6daca3b88e800c43069bdc31d7212d1f6fe4d5e67c0f4c91cf0bfa7fcdb1f29a59138fff05b16a5dbce7a26864ec69175b35e4b28835d479128ce860be87917124438f561ef491f60f570aef5fc4f5cbee810f08b199fe1580300198e4a30ac68a52f1f80d4ed4f553d8aea85cfa9fa8d92e0005ec53a8a7832c838a3005e7c870a1ce41ef20d56e4b9559a11af5284bf80e99c515e78cf445989ec093332565e3094647751c53ac713cc769e8d193970e787b420c2b26e0914ae66957e61320e48259f1a63b8a23ad2528d045e02a018161977f706d9dde2293a2b2df91e230b9c7b14390f2802d8574c607e2a71a8c746b9d1a33cd2492b3349e3fc71572c502813b218bfda8a1d75b76827d558057bd970c0d6c77eb7bbdee09c39680119f425bb25485a0bff288984cc6b98eb283157ec0bdfd8de8d0ddb9c76aa3efc2579b988a78b496604c2da9f1e37e0b0172a84e43d8df7b09797a818de4ac0b238456e6f2cd7aae5c933805ee4e9aa30281d672dc3eec41470688365622e40e655a382787ab3b59928f0398b3cecd74011b554e347d04446ed8855cccd928cd6c829f2f4c0874b0066a3ab5753c116fbac97ce83365310e1e9cf37aabb78edd9b4ec7fd6934392b4524f08c57e6898ae3d5842b962faa5c38e8033ad38026c7bc37f268a143969cdd1e6164eac5c7bbd61a7d133ffb6c4bdb3fce2f0d44b6c8cb48cfd5d24083883935c7e0f5008b0a18a4119f2537cd75fb0d83ee3ec57db819ac40ccf3f2206f71ffb248fcd973ff10324611be88695ebac45e0ee00060856bfdddd025fe584e02175c87e91b1e121f44866df3c2a833a3b49657b462bfa870634168d88824fdd1fc166f1f4c06d268ebce001556c36515d91a83692cdd7eccc7302b9f3275bc008d4d5b956661d1f0569f03fe2aaecb1f4d25c0802cda0fd10fd2a51bebf962466ef5355ed4944371a64a6e2f903c1cae2e994b139e280da262d5869a4c4e69ef1c26451c7ed030b416037275921308a22e86647cd8034587e1c2c841740687ec71436487426d85508fca748d5cebfe754f13a4468c3dc73b238122a700358e08fd237343c36ab507cfe85c7c9588f6164a6fd9b14b27d7353f84a2ea1ba1155c0e2e786088b713e3a3cffde21cc2764f9bf143aa8458f45cae1078b5614b38f0ad0517c6a143f177ec1b6354ebf63ae52c93d0e3762551df33d7499281f26f59167998d8ef844b96191518b45f1a92436243d3f62b49635a54578bfe1f1a69f527686cdf2b81631f7cb9c8b3ec093f3ac31052da66246f6fd9277cbdb59542aae1a4b1590a959ea6315bf05f0ddf777d47d19d83a2bd63ce7b2fc4ffbd74e827d1a2e032165ba2ac0ef61d9c888ae91ce1ae0cb7e8adbc820b2c8ba8cbc507070778be9bf4734eaf2a60c6610542d40bfd8c98a2cbcf71c9bf584fc14a3604bbe1d1a2d38294a277318dcbd82c3c46edb3b6ae915738abb3266cdbd7184d17c3a19937d71a7f60f27a54853f32023a904fe3a2a406b861702c9bd328c5ace93e0bd3f3bc5bd7ef8139bc81dd903702f4c6c7723b069cb04d532be9826230ad03b06563a6be704df5e0d30c815ff7ed6cdd04a86e46a7ade7d6d6091ae4be8c8205ab30ad7a2a59a5a0661614577dd52e4326586d4fb0ed50ed4cefb70c2a0b46974af97df87833a3f6372b3f55f938f74139592408b30601e7aa2478740bb16393a6f0d98a85165f8c8b351bb3228ab132551c1d1f851869ec2a955002349b765a4d437319caae03210f1ab65786d4542cc7f8eb7604544e71cf8cb26a679932f132eb6d471f3118042d87e00d66e433552ce540fb8047154cc8280826862b531408c31d7197ecb1b698d27dea10ef364a16060fda600742b542a60935b9eeabe3b46af5018c18e13aa1192004b4223841b01a7fea130303126c6382031e3ff0268feb3595bb948025af987f1b5846f7638a16aede95a57d8a93bd18227553fb9b557531156a9b41b7c4c815dd5afe18835955c4f67e8707b6192b875f906e72336afcf9a14128c97c40a1dbbd471f27ea683e6f934a57778b3fd9ad31c5425f70da0248a854492f17006e7383164f13b767ad1c22fddf7aa7188944362d17b2299f34479e82a49523a4ee8159417f5e86ad27a997893a873aadccd04b9a31b5f8ee11037104aa85aa622e9a91e1e4e1148eb69e1aaaddac47d91d4554e58eb5d6356f0b9cae3c461b6a54a0931fa30d0120b0bbcb2e29f7ee4241ae32f127e6bf08a20a83190f21b38bb3ab4c09c5ec387c5726b48355c8498a72536619700409f483ad149c8a4490de349fce49fbf3a6c521326e317ebaed0186b0bc332bf890ab51312e4f982aa3e42ef53ad3ad9d8b3764fe557fd20fc2ef1a5d15a3df4df98bf986dab7dd8afd8db2b69909ec7705a1acd5ffc0c437e6bbbe52853539a595f386618e8bf555d3040c6a4acf8d4e1eecefe130384a87b139a52f322f64294858f0564c2005101b43220fa854cef80527468c937fe0cd2cd0c20b5b5ad8720c73f87bd391e2036bfaab54881699801b1021db2d20be55ed12c9849172ef520229b68716922fceea9296435578880568311330fa6a377ce4d067efa6c11af2428e90b5181870b0ba66e52e85fd5a4493da7669214af708f89925074544bea7f4180ed76780f1304e1e12d54cb71f23d99e45e5ab69f5d16a7fca4a4cc530ff358f3d6bb1d70cb8e66b25e9ad1ffc79e292da5af32555af7f70d19b79760ea6ab3ba125925d628808f8a90908f9583a430b0802780568f6baf241d4eedaba06f6ffb4afe9122d27c9f9d9fe52bbb514eb2baf2ae1a43b9dc4ee6c4361be49a3ecfd82956ecacbf7afd3bef91add74d95a6dc39ba7f3e4cd35f89e20283bae24ccfb95cd8459890c447c71207d8ec5c57badb521455fe283df2931ca7c627ec7efbe5a7942b85097f32ee80bd4025cf1aaba7e0fb62d928e426db8e5670cd035218b3ef2aba172b0c12b0d7f91c0604f39d101355a3bcd5f3203a8647d1c9a71fe3b53a0e05bf8b3d9343366cd4e32cfbb652ca96d11e31fdad00ff7c65145d5b1f4491391e3331316bf654900230a9ffad22d69a1cd415159797ac8e6be30bd25adb0f442d177957da261f982288eb0a13e54a04745e9163355026ef53165bf60f"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="7d89630b8d4be2f2a3d7296f9a89259ef0ec7f8fbe48016c1fab1117f04df246de39d799f026a106b479717f919cf99f04bfa472bdd22fead93c2749036b7c2ec218c62ce59116ef51f9a3552218b3"], 0x20}}, 0x0) [ 619.562949][ T26] audit: type=1400 audit(1644688350.210:751): avc: denied { ioctl } for pid=22460 comm="syz-executor.2" path="socket:[87919]" dev="sockfs" ino=87919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 17:52:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 17:52:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x1f00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x28}, 0x0) 17:52:30 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20103, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="7d89630b8d4be2f2a3d7296f9a89259ef0ec7f8fbe48016c1fab1117f04df246de39d799f026a106b479717f919cf99f04bfa472bdd22fead93c2749036b7c2ec218c62ce59116ef51f9a3552218b3"], 0x20}}, 0x0) 17:52:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x3f00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}}, 0x20}}, 0x0) 17:52:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 17:52:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 620.138936][T22484] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:30 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20103, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "1692b3a50117d89185f4daf3cb8f0227055b59cf42e7b8b5eab22ed5f847061541ef0c5eca73c17c0ae863f2f0b48f28e3ffb1366618f63fdee72d9d9ddf6534e2f923ef97285cbf141dba0d19e7ebda1949d8517db2f9e6106e167d44586cae0ca5b80fa2227b3e864fcb11692f2081716435c768ca69122859b80dbf1ed951664730a1a7fbc41333087989dfc89f9cbda871961d8d722ea7c033631f63996eab0e870b449627f0426a7aabd549a4aeef8f582fe9be24b165069e62220f98e90fef73fef9cbdcd6fee95e34c48d4eb939f23836209cbbdf4acc5c85c746154b18e2769377f27c21f1dddd129a453a1f6f5a9d60c65ad12086b25da89853e04ab7ae471d5531651eee5661e982baeed844ae2e5b703170da9e0cf785ae2e2ce35e857e226a9350f0a79aa59af5b6a87bd652a8c92fd2b966b679ffdd2215a646b21b12587a9a369ed8867a96c6153d739706bdd5bd9bfc06a52507bbccdc498d7a147fea43cf60366c8e8fe0d3c7b93068cdfccc29570d35ad916ce03ccbfea3131b9df6640053982e5e58c3a6ee45506ad66765f5d2a4ed6ef49dba66a4cfbfc9a69bd8f2003a32aabdfb5c71e316dbb6d6362e3745794b6dc67afc43f4e76744194efe8a24151fe1a7f7bbed5047b4d27668281bb3dc5880ffe72887b4de09ef3c6eb29d37f003e5d530c10379ad2036ec7646d2008fa21bc6012a10492c9792e23c49e3736a3a7b161cf86c06798db9f56ded15ef6e96798ceea40f7d48f80e0e7236f57ad5aa6d878c646844e76306d56088f2d096541305872864dffdc2c89a616dbbe3d70240c53eccc4e8e6517ee0fa21cf9f68ab46b3935db4d63653064bacbeec952d81fa8018d24ace034fe9d4e3c2d1fc844ae99a638828d9dcfb20752bc740ebd3171d10845d94cbf4e2a3c552040e5b4032805bfcf5a30c22284a8ec5fe8e5192b80a2901b7a1517ee909a1f8198bece64aa0c03b3fb4dd9222816ee5d851b383ff9b39d8e42b637659cc7ae0b6c8f3363e7899b4b7d9c6a2aefb03181024dfc61060fa89c7f127519bb160d38c40106698c418384f259ce7582ebdf7bbddfaf0d20c9571d773b4f81c27eb1226070725cf401a783f0805ef897c2df466b9f1c66d80d7c1b3315d3681eb474492d2b15a2076ca0d54ab7d8f00457d68d87a6ef18732f118216e9ffe6c1c66fa28c88d045db49d6dd61fa5329effc5fe505235be5602a89d1617a3ae7b0135a61cef5c70cb8ef206c70177b162d468f64e5622ec2be58e35593ed155b24dc83e5a99fa518a901ceda7723b11a6feb51dcc9e45fa18b9fbf2c20be080ba2e0763839a8b5838dd11e4ce93eadff9fd898c3ce9ec2253d82fa10e066e0efaef7d3b0e305ee83091071914af2a068a74697045b71c8c649cd15d5ba51f170d8463690ee3c9cc3505feb4ef6bc1e61b424d39c68d7a421056bf74aa333b789e2e65ec2f0057455e998791b4cb5b1b3d3575ea9c4a1d27067737d5669050bac200e5560f1a954a466c67004867106726be5af9e2c9c3b53ff5a78b10cd599ec6ecbcc33bd80a100c4d341b296b9b37904f59afdd9b32c78074d196dadd9932ec936cb3133fc1cb37e3f04cac945f9cbd89736b9c96c507dd531a576e0be9dbb73735f0e91eec7700316db79a383b931e4cae36f93e71fc914fcee8b28f598c9087f8d6ed6c07f041cc4c58a79842338705dbc55019c80d53b9f6e42e9c973ac9cde04c5e386d360bee3cb7c9e8e3692e701b457bf9047606411564aee0a40caa4fc66d7fa1f74f0cc098c70068c747619b4a61f75f7581d65e07b55541e9aaf0bc3a67c5b274c5e2d191ff2987c55dfa0c143e3de28457e097726bbd1742b4e8b7162cb290805ba0a02ceeaf2d32feb5c519f57aeee1a6ab41f62ef170b9ab188792e639f2305c79572ef7b0adb5b1cc83e377a135c9dc1da1bf0b8fdd64b75e7c617fb7e5c102089aed119edfcd23af1987d36c05052e4b0ea5a37e0acbe18704ce063e4df0e67ea7606f02ec9ae92035a00d6a571073a9f24a8f263936a8af8447d6fe8643ceb12fbda50858c2f78c56854829222a5ef3ea6963704a47bd35bcabf7b5ac89939b45c0bde5a64df90f31c42fa28025991c9a2396f59a3e95b6f6ae76de754b8e06232ebdd7e9f24a105f6d930cc49b100807b25bd3e0e8827668ffcefb83b7ae5fe843d5484021e3a77a497650b1d50dc79d1272a0059796c04d7848236e9ccab5e8e8b0871be71ecc2951275be3cf1ce5f871fe8894cf443f83182e27d844ba16aba9f5e699b256d4ee66c05874b43440b239ccd92aec2553e031701378f87b2776a43373d7eaf9a1edd466fecad40cc879406f53a2ef999024946f97ee024f4c9bb20fee0b8e71f1a0e1feb0cf02022fdc2533713d5b8a60d5ddf9dbe675671dc1de0d73fac171c7f709342471304ec44383c59783a28aae8bf9099887ebee6142e33616f7d0e60546a828488e7bb467e7b69c2ec8cf8105314422ad4e8ef726cb8a51bdcf312d5de2642da7b54f72dcded50be14c307682d203365bff13b5dddc556059f415146f87512e4fe7c3910a6855cc7271e07bebb088c6a7afbee8e1b6daca3b88e800c43069bdc31d7212d1f6fe4d5e67c0f4c91cf0bfa7fcdb1f29a59138fff05b16a5dbce7a26864ec69175b35e4b28835d479128ce860be87917124438f561ef491f60f570aef5fc4f5cbee810f08b199fe1580300198e4a30ac68a52f1f80d4ed4f553d8aea85cfa9fa8d92e0005ec53a8a7832c838a3005e7c870a1ce41ef20d56e4b9559a11af5284bf80e99c515e78cf445989ec093332565e3094647751c53ac713cc769e8d193970e787b420c2b26e0914ae66957e61320e48259f1a63b8a23ad2528d045e02a018161977f706d9dde2293a2b2df91e230b9c7b14390f2802d8574c607e2a71a8c746b9d1a33cd2492b3349e3fc71572c502813b218bfda8a1d75b76827d558057bd970c0d6c77eb7bbdee09c39680119f425bb25485a0bff288984cc6b98eb283157ec0bdfd8de8d0ddb9c76aa3efc2579b988a78b496604c2da9f1e37e0b0172a84e43d8df7b09797a818de4ac0b238456e6f2cd7aae5c933805ee4e9aa30281d672dc3eec41470688365622e40e655a382787ab3b59928f0398b3cecd74011b554e347d04446ed8855cccd928cd6c829f2f4c0874b0066a3ab5753c116fbac97ce83365310e1e9cf37aabb78edd9b4ec7fd6934392b4524f08c57e6898ae3d5842b962faa5c38e8033ad38026c7bc37f268a143969cdd1e6164eac5c7bbd61a7d133ffb6c4bdb3fce2f0d44b6c8cb48cfd5d24083883935c7e0f5008b0a18a4119f2537cd75fb0d83ee3ec57db819ac40ccf3f2206f71ffb248fcd973ff10324611be88695ebac45e0ee00060856bfdddd025fe584e02175c87e91b1e121f44866df3c2a833a3b49657b462bfa870634168d88824fdd1fc166f1f4c06d268ebce001556c36515d91a83692cdd7eccc7302b9f3275bc008d4d5b956661d1f0569f03fe2aaecb1f4d25c0802cda0fd10fd2a51bebf962466ef5355ed4944371a64a6e2f903c1cae2e994b139e280da262d5869a4c4e69ef1c26451c7ed030b416037275921308a22e86647cd8034587e1c2c841740687ec71436487426d85508fca748d5cebfe754f13a4468c3dc73b238122a700358e08fd237343c36ab507cfe85c7c9588f6164a6fd9b14b27d7353f84a2ea1ba1155c0e2e786088b713e3a3cffde21cc2764f9bf143aa8458f45cae1078b5614b38f0ad0517c6a143f177ec1b6354ebf63ae52c93d0e3762551df33d7499281f26f59167998d8ef844b96191518b45f1a92436243d3f62b49635a54578bfe1f1a69f527686cdf2b81631f7cb9c8b3ec093f3ac31052da66246f6fd9277cbdb59542aae1a4b1590a959ea6315bf05f0ddf777d47d19d83a2bd63ce7b2fc4ffbd74e827d1a2e032165ba2ac0ef61d9c888ae91ce1ae0cb7e8adbc820b2c8ba8cbc507070778be9bf4734eaf2a60c6610542d40bfd8c98a2cbcf71c9bf584fc14a3604bbe1d1a2d38294a277318dcbd82c3c46edb3b6ae915738abb3266cdbd7184d17c3a19937d71a7f60f27a54853f32023a904fe3a2a406b861702c9bd328c5ace93e0bd3f3bc5bd7ef8139bc81dd903702f4c6c7723b069cb04d532be9826230ad03b06563a6be704df5e0d30c815ff7ed6cdd04a86e46a7ade7d6d6091ae4be8c8205ab30ad7a2a59a5a0661614577dd52e4326586d4fb0ed50ed4cefb70c2a0b46974af97df87833a3f6372b3f55f938f74139592408b30601e7aa2478740bb16393a6f0d98a85165f8c8b351bb3228ab132551c1d1f851869ec2a955002349b765a4d437319caae03210f1ab65786d4542cc7f8eb7604544e71cf8cb26a679932f132eb6d471f3118042d87e00d66e433552ce540fb8047154cc8280826862b531408c31d7197ecb1b698d27dea10ef364a16060fda600742b542a60935b9eeabe3b46af5018c18e13aa1192004b4223841b01a7fea130303126c6382031e3ff0268feb3595bb948025af987f1b5846f7638a16aede95a57d8a93bd18227553fb9b557531156a9b41b7c4c815dd5afe18835955c4f67e8707b6192b875f906e72336afcf9a14128c97c40a1dbbd471f27ea683e6f934a57778b3fd9ad31c5425f70da0248a854492f17006e7383164f13b767ad1c22fddf7aa7188944362d17b2299f34479e82a49523a4ee8159417f5e86ad27a997893a873aadccd04b9a31b5f8ee11037104aa85aa622e9a91e1e4e1148eb69e1aaaddac47d91d4554e58eb5d6356f0b9cae3c461b6a54a0931fa30d0120b0bbcb2e29f7ee4241ae32f127e6bf08a20a83190f21b38bb3ab4c09c5ec387c5726b48355c8498a72536619700409f483ad149c8a4490de349fce49fbf3a6c521326e317ebaed0186b0bc332bf890ab51312e4f982aa3e42ef53ad3ad9d8b3764fe557fd20fc2ef1a5d15a3df4df98bf986dab7dd8afd8db2b69909ec7705a1acd5ffc0c437e6bbbe52853539a595f386618e8bf555d3040c6a4acf8d4e1eecefe130384a87b139a52f322f64294858f0564c2005101b43220fa854cef80527468c937fe0cd2cd0c20b5b5ad8720c73f87bd391e2036bfaab54881699801b1021db2d20be55ed12c9849172ef520229b68716922fceea9296435578880568311330fa6a377ce4d067efa6c11af2428e90b5181870b0ba66e52e85fd5a4493da7669214af708f89925074544bea7f4180ed76780f1304e1e12d54cb71f23d99e45e5ab69f5d16a7fca4a4cc530ff358f3d6bb1d70cb8e66b25e9ad1ffc79e292da5af32555af7f70d19b79760ea6ab3ba125925d628808f8a90908f9583a430b0802780568f6baf241d4eedaba06f6ffb4afe9122d27c9f9d9fe52bbb514eb2baf2ae1a43b9dc4ee6c4361be49a3ecfd82956ecacbf7afd3bef91add74d95a6dc39ba7f3e4cd35f89e20283bae24ccfb95cd8459890c447c71207d8ec5c57badb521455fe283df2931ca7c627ec7efbe5a7942b85097f32ee80bd4025cf1aaba7e0fb62d928e426db8e5670cd035218b3ef2aba172b0c12b0d7f91c0604f39d101355a3bcd5f3203a8647d1c9a71fe3b53a0e05bf8b3d9343366cd4e32cfbb652ca96d11e31fdad00ff7c65145d5b1f4491391e3331316bf654900230a9ffad22d69a1cd415159797ac8e6be30bd25adb0f442d177957da261f982288eb0a13e54a04745e9163355026ef53165bf60f"}]}, 0x1020}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="7d89630b8d4be2f2a3d7296f9a89259ef0ec7f8fbe48016c1fab1117f04df246de39d799f026a106b479717f919cf99f04bfa472bdd22fead93c2749036b7c2ec218c62ce59116ef51f9a3552218b3"], 0x20}}, 0x0) 17:52:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 17:52:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) (async, rerun: 64) r3 = epoll_create1(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async, rerun: 64) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000100)) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) pipe(0x0) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 32) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x33}, 0x0) 17:52:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x840b, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:31 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 17:52:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe703, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x3b}, 0x0) 17:52:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xd01100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, "00e40700610001000100000000002200"}) write$binfmt_aout(r1, &(0x7f0000000400)={{0x10b, 0xbd, 0x3f, 0x14f, 0x56, 0x1, 0x3a2, 0x100}, "5656395d1262061585d536a2141f99430d8d70f8bdd7d332a6a51770ebb9998c40722e2f5595e771cf9673ace1615233f2de4d5ac91568662b3ccf3e61be7720a525a2455bea8f0e98cdf2fa1b21b9a22e55b25f52b76ea098342ce46be314c7b02a4352146f6f470d06d46c8d49943cdd7094c27973626fb55ff30dba8558a90f516ab0dbd93e0d4af33314d1657485b03b75dd9101d8cf90de0a4c743a97a143dae13c363f03bd0c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/thermal', 0x109040, 0x10) 17:52:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="e4348a4f552a6923030c6534"}]}]}, 0x3c}}, 0x840) 17:52:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="e4348a4f552a6923030c6534"}]}]}, 0x3c}}, 0x840) 17:52:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe80a, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x20}}, 0x0) 17:52:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="e4348a4f552a6923030c6534"}]}]}, 0x3c}}, 0x840) 17:52:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x6b}, 0x0) 17:52:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x20}}, 0x0) 17:52:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xff00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d804261f8a4e524a328e324b8438e3829fd3363a9a918a097729a9c7f6eeb63868109000000000000002ff9dbdc572a4ee552f2355059198cdc84139462ddbf1909bfb53a6e84c0f4527e4996b58e74bebf05478028c705b34a528155329fd8432fd077a41f670809278f292ea87dcb1adff54f6f4f2d9088bc6f58e07c7e29b8d1ff83ce14556e2c93a9938102e68ada16029efdf0de54c4e26a2667ea61be31bc4824e2e07ac974835ce2c2711e26e91300"/197], 0x20}}, 0x0) 17:52:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x300}, 0x0) 17:52:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xd01100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, "00e40700610001000100000000002200"}) write$binfmt_aout(r1, &(0x7f0000000400)={{0x10b, 0xbd, 0x3f, 0x14f, 0x56, 0x1, 0x3a2, 0x100}, "5656395d1262061585d536a2141f99430d8d70f8bdd7d332a6a51770ebb9998c40722e2f5595e771cf9673ace1615233f2de4d5ac91568662b3ccf3e61be7720a525a2455bea8f0e98cdf2fa1b21b9a22e55b25f52b76ea098342ce46be314c7b02a4352146f6f470d06d46c8d49943cdd7094c27973626fb55ff30dba8558a90f516ab0dbd93e0d4af33314d1657485b03b75dd9101d8cf90de0a4c743a97a143dae13c363f03bd0c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9) r3 = syz_open_pts(r1, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/thermal', 0x109040, 0x10) 17:52:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}}, 0x20}}, 0x0) 17:52:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d804261f8a4e524a328e324b8438e3829fd3363a9a918a097729a9c7f6eeb63868109000000000000002ff9dbdc572a4ee552f2355059198cdc84139462ddbf1909bfb53a6e84c0f4527e4996b58e74bebf05478028c705b34a528155329fd8432fd077a41f670809278f292ea87dcb1adff54f6f4f2d9088bc6f58e07c7e29b8d1ff83ce14556e2c93a9938102e68ada16029efdf0de54c4e26a2667ea61be31bc4824e2e07ac974835ce2c2711e26e91300"/197], 0x20}}, 0x0) 17:52:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) 17:52:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d804261f8a4e524a328e324b8438e3829fd3363a9a918a097729a9c7f6eeb63868109000000000000002ff9dbdc572a4ee552f2355059198cdc84139462ddbf1909bfb53a6e84c0f4527e4996b58e74bebf05478028c705b34a528155329fd8432fd077a41f670809278f292ea87dcb1adff54f6f4f2d9088bc6f58e07c7e29b8d1ff83ce14556e2c93a9938102e68ada16029efdf0de54c4e26a2667ea61be31bc4824e2e07ac974835ce2c2711e26e91300"/197], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d804261f8a4e524a328e324b8438e3829fd3363a9a918a097729a9c7f6eeb63868109000000000000002ff9dbdc572a4ee552f2355059198cdc84139462ddbf1909bfb53a6e84c0f4527e4996b58e74bebf05478028c705b34a528155329fd8432fd077a41f670809278f292ea87dcb1adff54f6f4f2d9088bc6f58e07c7e29b8d1ff83ce14556e2c93a9938102e68ada16029efdf0de54c4e26a2667ea61be31bc4824e2e07ac974835ce2c2711e26e91300"/197], 0x20}}, 0x0) (async) 17:52:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_dev$vcsn(&(0x7f0000000640), 0x1f, 0xea4d33eec65a96b3) recvmmsg$unix(r2, &(0x7f0000000680)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, &(0x7f0000000640)}}], 0x2, 0x40000000, &(0x7f0000000700)={0x0, 0x989680}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x80000) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xc0000003}) r6 = epoll_create1(0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2d6840, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x21a) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) write$rfkill(0xffffffffffffffff, &(0x7f0000000780)={0x3, 0x0, 0x1, 0x1, 0x1}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0xad51) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0xffffff1f}, 0x0) 17:52:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:33 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000007cf5ca060b380eb572d04f002100000008000300", @ANYRES32=r8, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}}, 0x20}}, 0x0) 17:52:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xd01100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, "00e40700610001000100000000002200"}) write$binfmt_aout(r1, &(0x7f0000000400)={{0x10b, 0xbd, 0x3f, 0x14f, 0x56, 0x1, 0x3a2, 0x100}, "5656395d1262061585d536a2141f99430d8d70f8bdd7d332a6a51770ebb9998c40722e2f5595e771cf9673ace1615233f2de4d5ac91568662b3ccf3e61be7720a525a2455bea8f0e98cdf2fa1b21b9a22e55b25f52b76ea098342ce46be314c7b02a4352146f6f470d06d46c8d49943cdd7094c27973626fb55ff30dba8558a90f516ab0dbd93e0d4af33314d1657485b03b75dd9101d8cf90de0a4c743a97a143dae13c363f03bd0c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/thermal', 0x109040, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xd01100, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, "00e40700610001000100000000002200"}) (async) write$binfmt_aout(r1, &(0x7f0000000400)={{0x10b, 0xbd, 0x3f, 0x14f, 0x56, 0x1, 0x3a2, 0x100}, "5656395d1262061585d536a2141f99430d8d70f8bdd7d332a6a51770ebb9998c40722e2f5595e771cf9673ace1615233f2de4d5ac91568662b3ccf3e61be7720a525a2455bea8f0e98cdf2fa1b21b9a22e55b25f52b76ea098342ce46be314c7b02a4352146f6f470d06d46c8d49943cdd7094c27973626fb55ff30dba8558a90f516ab0dbd93e0d4af33314d1657485b03b75dd9101d8cf90de0a4c743a97a143dae13c363f03bd0c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/thermal', 0x109040, 0x10) (async) 17:52:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}}, 0x20}}, 0x0) 17:52:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 623.195220][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000007cf5ca060b380eb572d04f002100000008000300", @ANYRES32=r8, @ANYBLOB="04002d80"], 0x20}}, 0x0) [ 623.373352][T22629] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x2}, 0x0) 17:52:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}}, 0x20}}, 0x0) [ 623.555354][T22644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:34 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_dev$vcsn(&(0x7f0000000640), 0x1f, 0xea4d33eec65a96b3) recvmmsg$unix(r2, &(0x7f0000000680)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, &(0x7f0000000640)}}], 0x2, 0x40000000, &(0x7f0000000700)={0x0, 0x989680}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x80000) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xc0000003}) r6 = epoll_create1(0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2d6840, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x21a) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) write$rfkill(0xffffffffffffffff, &(0x7f0000000780)={0x3, 0x0, 0x1, 0x1, 0x1}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0xad51) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) syz_open_dev$vcsn(&(0x7f0000000640), 0x1f, 0xea4d33eec65a96b3) (async) recvmmsg$unix(r2, &(0x7f0000000680)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, &(0x7f0000000640)}}], 0x2, 0x40000000, &(0x7f0000000700)={0x0, 0x989680}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x80000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xc0000003}) (async) epoll_create1(0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2d6840, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x21a) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000780)={0x3, 0x0, 0x1, 0x1, 0x1}, 0x8) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0xad51) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$KDADDIO(r4, 0x4b34, 0x1) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 17:52:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000007cf5ca060b380eb572d04f002100000008000300", @ANYRES32=r8, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3}, 0x0) 17:52:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}}, 0x20}}, 0x0) 17:52:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 624.071951][T22663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.086704][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.093019][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 17:52:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 17:52:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x4}, 0x0) 17:52:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x20}}, 0x0) 17:52:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:35 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000640), 0x1f, 0xea4d33eec65a96b3) recvmmsg$unix(r2, &(0x7f0000000680)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, &(0x7f0000000640)}}], 0x2, 0x40000000, &(0x7f0000000700)={0x0, 0x989680}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x80000) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xc0000003}) (async) r6 = epoll_create1(0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2d6840, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x21a) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async, rerun: 64) write$rfkill(0xffffffffffffffff, &(0x7f0000000780)={0x3, 0x0, 0x1, 0x1, 0x1}, 0x8) (rerun: 64) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0xad51) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:35 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$KDADDIO(r4, 0x4b34, 0x1) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$KDADDIO(r4, 0x4b34, 0x1) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x310a0000}}, 0x20}}, 0x0) 17:52:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 17:52:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x5}, 0x0) 17:52:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x20}}, 0x0) 17:52:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) 17:52:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}}, 0x20}}, 0x0) 17:52:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) 17:52:36 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x6}, 0x0) 17:52:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}}, 0x20}}, 0x0) 17:52:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xc000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xca00}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000f820d684009bf2003bcd07454257fedcff7782420e9b3f5b88851a4183f89dc4f1e79f", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$KDADDIO(r4, 0x4b34, 0x1) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xca00}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000f820d684009bf2003bcd07454257fedcff7782420e9b3f5b88851a4183f89dc4f1e79f", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}}, 0x20}}, 0x0) 17:52:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}, 0x20}}, 0x0) 17:52:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:36 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x7}, 0x0) [ 626.179542][T12254] Bluetooth: hci1: command 0x0406 tx timeout 17:52:37 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) (async, rerun: 32) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 17:52:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 17:52:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x1f000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x30}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xca00}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000f820d684009bf2003bcd07454257fedcff7782420e9b3f5b88851a4183f89dc4f1e79f", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x8}, 0x0) 17:52:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x3f000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}}, 0x20}}, 0x0) 17:52:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="27cf1f22", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 17:52:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="27cf1f22", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:37 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r2, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9}, 0x0) 17:52:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x840b0000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 17:52:37 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="27cf1f22", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 17:52:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000) 17:52:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xc}, 0x0) 17:52:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 17:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) r2 = syz_open_pts(r1, 0x4c0181) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) fremovexattr(r4, &(0x7f0000000100)=@random={'system.', '/dev/ptmx\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) dup3(r5, r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:52:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x20}}, 0x0) 17:52:38 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000) 17:52:38 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xe80a0000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:38 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:38 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe}, 0x0) 17:52:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}}, 0x0) 17:52:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 17:52:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf}, 0x0) 17:52:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 17:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) r2 = syz_open_pts(r1, 0x4c0181) (async, rerun: 64) r3 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) fremovexattr(r4, &(0x7f0000000100)=@random={'system.', '/dev/ptmx\x00'}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) dup3(r5, r6, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:52:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xff000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000) 17:52:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x0) 17:52:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x60}, 0x0) 17:52:39 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x20}}, 0x0) 17:52:39 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:40 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04004f80e7ba258f49cededc82eadac20086a6aa796b8f5c5bebf822c7e4b871393e55cdbaa6e424acd84dc1cfc678463a7618ff8337c79623"], 0x20}}, 0x0) 17:52:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20}}, 0x0) 17:52:40 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04004f80e7ba258f49cededc82eadac20086a6aa796b8f5c5bebf822c7e4b871393e55cdbaa6e424acd84dc1cfc678463a7618ff8337c79623"], 0x20}}, 0x0) 17:52:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) r2 = syz_open_pts(r1, 0x4c0181) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) fremovexattr(r4, &(0x7f0000000100)=@random={'system.', '/dev/ptmx\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) (async) dup3(r5, r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:52:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf0}, 0x0) 17:52:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 17:52:40 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="04004f80e7ba258f49cededc82eadac20086a6aa796b8f5c5bebf822c7e4b871393e55cdbaa6e424acd84dc1cfc678463a7618ff8337c79623"], 0x20}}, 0x0) 17:52:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:40 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, 0x20}}, 0x0) 17:52:40 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:41 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xc01, 0x4, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x42bea21e2cc34001}, 0x4040) 17:52:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, 0x20}}, 0x0) 17:52:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x300}, 0x0) 17:52:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r0], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x116, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000100)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x20}}, 0x0) 17:52:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3e7}, 0x0) 17:52:41 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xc01, 0x4, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x42bea21e2cc34001}, 0x4040) 17:52:41 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 17:52:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, 0x20}}, 0x0) 17:52:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x500}, 0x0) 17:52:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) (async) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r0], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x116, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000100)=0x6) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:42 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xc01, 0x4, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x42bea21e2cc34001}, 0x4040) 17:52:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}, 0x20}}, 0x0) 17:52:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x596}, 0x0) 17:52:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r4 = syz_io_uring_complete(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xbf90, &(0x7f0000000100)={[0x7fffffff]}, 0x8) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 17:52:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x60, 0x1}, {0x9}, {0x24}, {0x6}, {0x4}, {0xc}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x36}, {0x3, 0x1}, {0x36}, {0x30, 0x1}, {0x5}, {0x3, 0x1}, {0x7a}, {0x60}, {0x60}, {0x30}, {0x1b}, {0x4}, {0x0, 0x1}, {0xc}, {0x5, 0x1}, {0xcb}, {0x16}, {0x9}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf9d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:52:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) (async) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES16=r2, @ANYRESDEC=r0], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) r3 = syz_open_pts(r1, 0x0) (rerun: 32) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x116, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000100)=0x6) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) 17:52:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x600}, 0x0) 17:52:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x60, 0x1}, {0x9}, {0x24}, {0x6}, {0x4}, {0xc}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x36}, {0x3, 0x1}, {0x36}, {0x30, 0x1}, {0x5}, {0x3, 0x1}, {0x7a}, {0x60}, {0x60}, {0x30}, {0x1b}, {0x4}, {0x0, 0x1}, {0xc}, {0x5, 0x1}, {0xcb}, {0x16}, {0x9}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf9d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x60, 0x1}, {0x9}, {0x24}, {0x6}, {0x4}, {0xc}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x36}, {0x3, 0x1}, {0x36}, {0x30, 0x1}, {0x5}, {0x3, 0x1}, {0x7a}, {0x60}, {0x60}, {0x30}, {0x1b}, {0x4}, {0x0, 0x1}, {0xc}, {0x5, 0x1}, {0xcb}, {0x16}, {0x9}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf9d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0xc0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:52:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:43 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) 17:52:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 17:52:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x60, 0x1}, {0x9}, {0x24}, {0x6}, {0x4}, {0xc}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x36}, {0x3, 0x1}, {0x36}, {0x30, 0x1}, {0x5}, {0x3, 0x1}, {0x7a}, {0x60}, {0x60}, {0x30}, {0x1b}, {0x4}, {0x0, 0x1}, {0xc}, {0x5, 0x1}, {0xcb}, {0x16}, {0x9}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf9d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x60, 0x1}, {0x9}, {0x24}, {0x6}, {0x4}, {0xc}, {0xb, 0x1}, {0x18, 0x1}, {0x5}, {0x36}, {0x3, 0x1}, {0x36}, {0x30, 0x1}, {0x5}, {0x3, 0x1}, {0x7a}, {0x60}, {0x60}, {0x30}, {0x1b}, {0x4}, {0x0, 0x1}, {0xc}, {0x5, 0x1}, {0xcb}, {0x16}, {0x9}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xa}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf9d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0xc0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) [ 633.110448][T23091] warn_alloc: 3 callbacks suppressed [ 633.110466][T23091] syz-executor.2: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 633.189362][T23091] CPU: 0 PID: 23091 Comm: syz-executor.2 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 633.199910][T23091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.209984][T23091] Call Trace: [ 633.213280][T23091] [ 633.216220][T23091] dump_stack_lvl+0xcd/0x134 [ 633.220831][T23091] warn_alloc.cold+0x9b/0x189 [ 633.225530][T23091] ? zone_watermark_ok_safe+0x290/0x290 [ 633.231094][T23091] ? __vmalloc_node_range+0x7bf/0x1060 [ 633.236565][T23091] __vmalloc_node_range+0xe1e/0x1060 [ 633.241866][T23091] ? vfree_atomic+0xe0/0xe0 [ 633.246388][T23091] ? rcu_read_lock_sched_held+0x3a/0x70 [ 633.251960][T23091] ? kmem_cache_alloc_node+0x3ce/0x590 [ 633.257435][T23091] ? kernel_clone+0xe7/0xab0 [ 633.262045][T23091] copy_process+0x926/0x7300 [ 633.266644][T23091] ? kernel_clone+0xe7/0xab0 [ 633.271245][T23091] ? lock_chain_count+0x20/0x20 [ 633.276110][T23091] ? lock_chain_count+0x20/0x20 [ 633.280973][T23091] ? find_held_lock+0x2d/0x110 [ 633.285756][T23091] ? __cleanup_sighand+0xb0/0xb0 [ 633.290710][T23091] ? lock_downgrade+0x6e0/0x6e0 [ 633.295575][T23091] ? __lock_acquire+0x1655/0x5470 [ 633.300613][T23091] ? kernel_clone+0x314/0xab0 [ 633.305298][T23091] kernel_clone+0xe7/0xab0 [ 633.309724][T23091] ? create_io_thread+0xf0/0xf0 [ 633.314591][T23091] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 633.320684][T23091] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 633.326689][T23091] ? find_held_lock+0x2d/0x110 [ 633.331467][T23091] __do_sys_clone+0xc8/0x110 [ 633.336156][T23091] ? kernel_clone+0xab0/0xab0 [ 633.340842][T23091] ? lock_downgrade+0x6e0/0x6e0 [ 633.345704][T23091] ? syscall_enter_from_user_mode+0x21/0x70 [ 633.351612][T23091] do_syscall_64+0x35/0xb0 [ 633.356040][T23091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.361948][T23091] RIP: 0033:0x7fb807326481 [ 633.366377][T23091] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 17:52:44 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) r4 = syz_io_uring_complete(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xbf90, &(0x7f0000000100)={[0x7fffffff]}, 0x8) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa31}}, 0x20}}, 0x0) 17:52:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x700}, 0x0) 17:52:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 633.386001][T23091] RSP: 002b:00007ffd7dc9d9b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 633.394432][T23091] RAX: ffffffffffffffda RBX: 00007fb805b71700 RCX: 00007fb807326481 [ 633.402421][T23091] RDX: 00007fb805b719d0 RSI: 00007fb805b712f0 RDI: 00000000003d0f00 [ 633.410401][T23091] RBP: 00007ffd7dc9dc00 R08: 00007fb805b71700 R09: 00007fb805b71700 [ 633.418381][T23091] R10: 00007fb805b719d0 R11: 0000000000000206 R12: 00007ffd7dc9da6e [ 633.426356][T23091] R13: 00007ffd7dc9da6f R14: 00007fb805b71300 R15: 0000000000022000 [ 633.434334][T23091] [ 633.463942][T23091] Mem-Info: [ 633.469752][T23091] active_anon:4524 inactive_anon:152493 isolated_anon:0 [ 633.469752][T23091] active_file:4929 inactive_file:7538 isolated_file:0 [ 633.469752][T23091] unevictable:768 dirty:67 writeback:0 [ 633.469752][T23091] slab_reclaimable:22104 slab_unreclaimable:115208 [ 633.469752][T23091] mapped:27632 shmem:6027 pagetables:887 bounce:0 [ 633.469752][T23091] kernel_misc_reclaimable:0 [ 633.469752][T23091] free:1296895 free_pcp:8076 free_cma:0 17:52:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 17:52:44 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, 0x20}}, 0x0) [ 633.730689][T23091] Node 0 active_anon:18104kB inactive_anon:615528kB active_file:19640kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110456kB dirty:264kB writeback:0kB shmem:21640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB kernel_stack:10912kB pagetables:3752kB all_unreclaimable? no 17:52:44 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x900}, 0x0) 17:52:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) [ 633.917651][T23091] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no 17:52:44 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) [ 633.970111][T23091] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:52:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x310a}}, 0x20}}, 0x0) [ 634.264693][T23091] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 634.298349][T23091] Node 0 DMA32 free:1222880kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18104kB inactive_anon:611112kB active_file:19640kB inactive_file:30152kB unevictable:1536kB writepending:264kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:29912kB local_pcp:7716kB free_cma:0kB [ 634.402531][T23091] lowmem_reserve[]: 0 0 0 0 0 [ 634.408425][T23091] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.458122][T23091] lowmem_reserve[]: 0 0 0 0 0 [ 634.463495][T23091] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.506459][T23091] lowmem_reserve[]: 0 0 0 0 0 [ 634.511206][T23091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 634.524240][T23091] Node 0 DMA32: 1955*4kB (UME) 1099*8kB (UME) 929*16kB (UME) 512*32kB (UME) 180*64kB (UME) 52*128kB (UME) 22*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 278*4096kB (UM) = 1225204kB [ 634.543509][T23091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.555936][T23091] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 634.574303][T23091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.584385][T23091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 634.594138][T23091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.606581][T23091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 634.619098][T23091] 18496 total pagecache pages [ 634.626184][T23091] 0 pages in swap cache [ 634.630506][T23091] Swap cache stats: add 0, delete 0, find 0/0 [ 634.637597][T23091] Free swap = 0kB [ 634.641499][T23091] Total swap = 0kB [ 634.645767][T23091] 2097051 pages RAM [ 634.649839][T23091] 0 pages HighMem/MovableOnly [ 634.655042][T23091] 384533 pages reserved 17:52:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "1692b3a50117d89185f4daf3cb8f0227055b59cf42e7b8b5eab22ed5f847061541ef0c5eca73c17c0ae863f2f0b48f28e3ffb1366618f63fdee72d9d9ddf6534e2f923ef97285cbf141dba0d19e7ebda1949d8517db2f9e6106e167d44586cae0ca5b80fa2227b3e864fcb11692f2081716435c768ca69122859b80dbf1ed951664730a1a7fbc41333087989dfc89f9cbda871961d8d722ea7c033631f63996eab0e870b449627f0426a7aabd549a4aeef8f582fe9be24b165069e62220f98e90fef73fef9cbdcd6fee95e34c48d4eb939f23836209cbbdf4acc5c85c746154b18e2769377f27c21f1dddd129a453a1f6f5a9d60c65ad12086b25da89853e04ab7ae471d5531651eee5661e982baeed844ae2e5b703170da9e0cf785ae2e2ce35e857e226a9350f0a79aa59af5b6a87bd652a8c92fd2b966b679ffdd2215a646b21b12587a9a369ed8867a96c6153d739706bdd5bd9bfc06a52507bbccdc498d7a147fea43cf60366c8e8fe0d3c7b93068cdfccc29570d35ad916ce03ccbfea3131b9df6640053982e5e58c3a6ee45506ad66765f5d2a4ed6ef49dba66a4cfbfc9a69bd8f2003a32aabdfb5c71e316dbb6d6362e3745794b6dc67afc43f4e76744194efe8a24151fe1a7f7bbed5047b4d27668281bb3dc5880ffe72887b4de09ef3c6eb29d37f003e5d530c10379ad2036ec7646d2008fa21bc6012a10492c9792e23c49e3736a3a7b161cf86c06798db9f56ded15ef6e96798ceea40f7d48f80e0e7236f57ad5aa6d878c646844e76306d56088f2d096541305872864dffdc2c89a616dbbe3d70240c53eccc4e8e6517ee0fa21cf9f68ab46b3935db4d63653064bacbeec952d81fa8018d24ace034fe9d4e3c2d1fc844ae99a638828d9dcfb20752bc740ebd3171d10845d94cbf4e2a3c552040e5b4032805bfcf5a30c22284a8ec5fe8e5192b80a2901b7a1517ee909a1f8198bece64aa0c03b3fb4dd9222816ee5d851b383ff9b39d8e42b637659cc7ae0b6c8f3363e7899b4b7d9c6a2aefb03181024dfc61060fa89c7f127519bb160d38c40106698c418384f259ce7582ebdf7bbddfaf0d20c9571d773b4f81c27eb1226070725cf401a783f0805ef897c2df466b9f1c66d80d7c1b3315d3681eb474492d2b15a2076ca0d54ab7d8f00457d68d87a6ef18732f118216e9ffe6c1c66fa28c88d045db49d6dd61fa5329effc5fe505235be5602a89d1617a3ae7b0135a61cef5c70cb8ef206c70177b162d468f64e5622ec2be58e35593ed155b24dc83e5a99fa518a901ceda7723b11a6feb51dcc9e45fa18b9fbf2c20be080ba2e0763839a8b5838dd11e4ce93eadff9fd898c3ce9ec2253d82fa10e066e0efaef7d3b0e305ee83091071914af2a068a74697045b71c8c649cd15d5ba51f170d8463690ee3c9cc3505feb4ef6bc1e61b424d39c68d7a421056bf74aa333b789e2e65ec2f0057455e998791b4cb5b1b3d3575ea9c4a1d27067737d5669050bac200e5560f1a954a466c67004867106726be5af9e2c9c3b53ff5a78b10cd599ec6ecbcc33bd80a100c4d341b296b9b37904f59afdd9b32c78074d196dadd9932ec936cb3133fc1cb37e3f04cac945f9cbd89736b9c96c507dd531a576e0be9dbb73735f0e91eec7700316db79a383b931e4cae36f93e71fc914fcee8b28f598c9087f8d6ed6c07f041cc4c58a79842338705dbc55019c80d53b9f6e42e9c973ac9cde04c5e386d360bee3cb7c9e8e3692e701b457bf9047606411564aee0a40caa4fc66d7fa1f74f0cc098c70068c747619b4a61f75f7581d65e07b55541e9aaf0bc3a67c5b274c5e2d191ff2987c55dfa0c143e3de28457e097726bbd1742b4e8b7162cb290805ba0a02ceeaf2d32feb5c519f57aeee1a6ab41f62ef170b9ab188792e639f2305c79572ef7b0adb5b1cc83e377a135c9dc1da1bf0b8fdd64b75e7c617fb7e5c102089aed119edfcd23af1987d36c05052e4b0ea5a37e0acbe18704ce063e4df0e67ea7606f02ec9ae92035a00d6a571073a9f24a8f263936a8af8447d6fe8643ceb12fbda50858c2f78c56854829222a5ef3ea6963704a47bd35bcabf7b5ac89939b45c0bde5a64df90f31c42fa28025991c9a2396f59a3e95b6f6ae76de754b8e06232ebdd7e9f24a105f6d930cc49b100807b25bd3e0e8827668ffcefb83b7ae5fe843d5484021e3a77a497650b1d50dc79d1272a0059796c04d7848236e9ccab5e8e8b0871be71ecc2951275be3cf1ce5f871fe8894cf443f83182e27d844ba16aba9f5e699b256d4ee66c05874b43440b239ccd92aec2553e031701378f87b2776a43373d7eaf9a1edd466fecad40cc879406f53a2ef999024946f97ee024f4c9bb20fee0b8e71f1a0e1feb0cf02022fdc2533713d5b8a60d5ddf9dbe675671dc1de0d73fac171c7f709342471304ec44383c59783a28aae8bf9099887ebee6142e33616f7d0e60546a828488e7bb467e7b69c2ec8cf8105314422ad4e8ef726cb8a51bdcf312d5de2642da7b54f72dcded50be14c307682d203365bff13b5dddc556059f415146f87512e4fe7c3910a6855cc7271e07bebb088c6a7afbee8e1b6daca3b88e800c43069bdc31d7212d1f6fe4d5e67c0f4c91cf0bfa7fcdb1f29a59138fff05b16a5dbce7a26864ec69175b35e4b28835d479128ce860be87917124438f561ef491f60f570aef5fc4f5cbee810f08b199fe1580300198e4a30ac68a52f1f80d4ed4f553d8aea85cfa9fa8d92e0005ec53a8a7832c838a3005e7c870a1ce41ef20d56e4b9559a11af5284bf80e99c515e78cf445989ec093332565e3094647751c53ac713cc769e8d193970e787b420c2b26e0914ae66957e61320e48259f1a63b8a23ad2528d045e02a018161977f706d9dde2293a2b2df91e230b9c7b14390f2802d8574c607e2a71a8c746b9d1a33cd2492b3349e3fc71572c502813b218bfda8a1d75b76827d558057bd970c0d6c77eb7bbdee09c39680119f425bb25485a0bff288984cc6b98eb283157ec0bdfd8de8d0ddb9c76aa3efc2579b988a78b496604c2da9f1e37e0b0172a84e43d8df7b09797a818de4ac0b238456e6f2cd7aae5c933805ee4e9aa30281d672dc3eec41470688365622e40e655a382787ab3b59928f0398b3cecd74011b554e347d04446ed8855cccd928cd6c829f2f4c0874b0066a3ab5753c116fbac97ce83365310e1e9cf37aabb78edd9b4ec7fd6934392b4524f08c57e6898ae3d5842b962faa5c38e8033ad38026c7bc37f268a143969cdd1e6164eac5c7bbd61a7d133ffb6c4bdb3fce2f0d44b6c8cb48cfd5d24083883935c7e0f5008b0a18a4119f2537cd75fb0d83ee3ec57db819ac40ccf3f2206f71ffb248fcd973ff10324611be88695ebac45e0ee00060856bfdddd025fe584e02175c87e91b1e121f44866df3c2a833a3b49657b462bfa870634168d88824fdd1fc166f1f4c06d268ebce001556c36515d91a83692cdd7eccc7302b9f3275bc008d4d5b956661d1f0569f03fe2aaecb1f4d25c0802cda0fd10fd2a51bebf962466ef5355ed4944371a64a6e2f903c1cae2e994b139e280da262d5869a4c4e69ef1c26451c7ed030b416037275921308a22e86647cd8034587e1c2c841740687ec71436487426d85508fca748d5cebfe754f13a4468c3dc73b238122a700358e08fd237343c36ab507cfe85c7c9588f6164a6fd9b14b27d7353f84a2ea1ba1155c0e2e786088b713e3a3cffde21cc2764f9bf143aa8458f45cae1078b5614b38f0ad0517c6a143f177ec1b6354ebf63ae52c93d0e3762551df33d7499281f26f59167998d8ef844b96191518b45f1a92436243d3f62b49635a54578bfe1f1a69f527686cdf2b81631f7cb9c8b3ec093f3ac31052da66246f6fd9277cbdb59542aae1a4b1590a959ea6315bf05f0ddf777d47d19d83a2bd63ce7b2fc4ffbd74e827d1a2e032165ba2ac0ef61d9c888ae91ce1ae0cb7e8adbc820b2c8ba8cbc507070778be9bf4734eaf2a60c6610542d40bfd8c98a2cbcf71c9bf584fc14a3604bbe1d1a2d38294a277318dcbd82c3c46edb3b6ae915738abb3266cdbd7184d17c3a19937d71a7f60f27a54853f32023a904fe3a2a406b861702c9bd328c5ace93e0bd3f3bc5bd7ef8139bc81dd903702f4c6c7723b069cb04d532be9826230ad03b06563a6be704df5e0d30c815ff7ed6cdd04a86e46a7ade7d6d6091ae4be8c8205ab30ad7a2a59a5a0661614577dd52e4326586d4fb0ed50ed4cefb70c2a0b46974af97df87833a3f6372b3f55f938f74139592408b30601e7aa2478740bb16393a6f0d98a85165f8c8b351bb3228ab132551c1d1f851869ec2a955002349b765a4d437319caae03210f1ab65786d4542cc7f8eb7604544e71cf8cb26a679932f132eb6d471f3118042d87e00d66e433552ce540fb8047154cc8280826862b531408c31d7197ecb1b698d27dea10ef364a16060fda600742b542a60935b9eeabe3b46af5018c18e13aa1192004b4223841b01a7fea130303126c6382031e3ff0268feb3595bb948025af987f1b5846f7638a16aede95a57d8a93bd18227553fb9b557531156a9b41b7c4c815dd5afe18835955c4f67e8707b6192b875f906e72336afcf9a14128c97c40a1dbbd471f27ea683e6f934a57778b3fd9ad31c5425f70da0248a854492f17006e7383164f13b767ad1c22fddf7aa7188944362d17b2299f34479e82a49523a4ee8159417f5e86ad27a997893a873aadccd04b9a31b5f8ee11037104aa85aa622e9a91e1e4e1148eb69e1aaaddac47d91d4554e58eb5d6356f0b9cae3c461b6a54a0931fa30d0120b0bbcb2e29f7ee4241ae32f127e6bf08a20a83190f21b38bb3ab4c09c5ec387c5726b48355c8498a72536619700409f483ad149c8a4490de349fce49fbf3a6c521326e317ebaed0186b0bc332bf890ab51312e4f982aa3e42ef53ad3ad9d8b3764fe557fd20fc2ef1a5d15a3df4df98bf986dab7dd8afd8db2b69909ec7705a1acd5ffc0c437e6bbbe52853539a595f386618e8bf555d3040c6a4acf8d4e1eecefe130384a87b139a52f322f64294858f0564c2005101b43220fa854cef80527468c937fe0cd2cd0c20b5b5ad8720c73f87bd391e2036bfaab54881699801b1021db2d20be55ed12c9849172ef520229b68716922fceea9296435578880568311330fa6a377ce4d067efa6c11af2428e90b5181870b0ba66e52e85fd5a4493da7669214af708f89925074544bea7f4180ed76780f1304e1e12d54cb71f23d99e45e5ab69f5d16a7fca4a4cc530ff358f3d6bb1d70cb8e66b25e9ad1ffc79e292da5af32555af7f70d19b79760ea6ab3ba125925d628808f8a90908f9583a430b0802780568f6baf241d4eedaba06f6ffb4afe9122d27c9f9d9fe52bbb514eb2baf2ae1a43b9dc4ee6c4361be49a3ecfd82956ecacbf7afd3bef91add74d95a6dc39ba7f3e4cd35f89e20283bae24ccfb95cd8459890c447c71207d8ec5c57badb521455fe283df2931ca7c627ec7efbe5a7942b85097f32ee80bd4025cf1aaba7e0fb62d928e426db8e5670cd035218b3ef2aba172b0c12b0d7f91c0604f39d101355a3bcd5f3203a8647d1c9a71fe3b53a0e05bf8b3d9343366cd4e32cfbb652ca96d11e31fdad00ff7c65145d5b1f4491391e3331316bf654900230a9ffad22d69a1cd415159797ac8e6be30bd25adb0f442d177957da261f982288eb0a13e54a04745e9163355026ef53165bf60f"}]}, 0x1020}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="201068724c706357d7d9704da7d14717800000331a8cd7f6b113b9e13b8cae98bd7c4be48bee405234b608583f6da33e02a65bb3dcdbcccb69ce6736748f62d98a57b5f8c3ad59d0ac1ca0ed965942fb3e3065d238452975d32e47db849226720afe9941c526a2f2d91078c4fc6e9928b38b546ce08c3e57af74ad005a4c6a5f5c066ea73312a03f09e10ed9671c0c24b03ea596df77f4f77a0d8bd94b4300", @ANYRES16=r1, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xb84}, 0x0) 17:52:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}}, 0x20}}, 0x0) 17:52:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r4 = syz_io_uring_complete(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xbf90, &(0x7f0000000100)={[0x7fffffff]}, 0x8) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) syz_io_uring_complete(0x0) (async) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0xbf90, &(0x7f0000000100)={[0x7fffffff]}, 0x8) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 634.659358][T23091] 0 pages cma reserved 17:52:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x20}}, 0x0) 17:52:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="201068724c706357d7d9704da7d14717800000331a8cd7f6b113b9e13b8cae98bd7c4be48bee405234b608583f6da33e02a65bb3dcdbcccb69ce6736748f62d98a57b5f8c3ad59d0ac1ca0ed965942fb3e3065d238452975d32e47db849226720afe9941c526a2f2d91078c4fc6e9928b38b546ce08c3e57af74ad005a4c6a5f5c066ea73312a03f09e10ed9671c0c24b03ea596df77f4f77a0d8bd94b4300", @ANYRES16=r1, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}}, 0x20}}, 0x0) 17:52:45 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xc00}, 0x0) 17:52:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:46 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) (async) 17:52:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}}, 0x20}}, 0x0) 17:52:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="201068724c706357d7d9704da7d14717800000331a8cd7f6b113b9e13b8cae98bd7c4be48bee405234b608583f6da33e02a65bb3dcdbcccb69ce6736748f62d98a57b5f8c3ad59d0ac1ca0ed965942fb3e3065d238452975d32e47db849226720afe9941c526a2f2d91078c4fc6e9928b38b546ce08c3e57af74ad005a4c6a5f5c066ea73312a03f09e10ed9671c0c24b03ea596df77f4f77a0d8bd94b4300", @ANYRES16=r1, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:46 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe00}, 0x0) 17:52:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 17:52:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x93, 0x30, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x90, 0xd26b, 0xdcc9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0x5, 0x20, @mcast2, @rand_addr=' \x01\x00', 0x9c, 0x700, 0xfe67, 0xbe}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xff, 0xff, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, 0x0, 0x12c, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004095}, 0x41) 17:52:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 17:52:46 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b10020007c0600"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r4, 0x9) syz_open_procfs(r4, &(0x7f0000000180)='net/udplite\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x1b26790c}, {&(0x7f00000001c0)="3e026f781a12d6bb2d8571a338a96b16c1cbe8c9dce1323be3651259477a2cd59ae19e3c982a929e94bd063ced345bfc9307a81b704913cf744563499574999a547be7148bca6ce57a07c23105ec6a4899c350ba8c1e34790377dc1e81490f", 0x5f, 0xffffffffffff8001}], 0x10000, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nodiscard}, {@snapshot={'snapshot', 0x3d, 0x3}}, {@order_relaxed}, {}, {@order_strict}, {@order_relaxed}, {@order_strict}, {@norecovery}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r![#'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-@('}}]}) r7 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x106) dup3(r6, r7, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x20}}, 0x0) [ 635.776883][T23214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x93, 0x30, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x90, 0xd26b, 0xdcc9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0x5, 0x20, @mcast2, @rand_addr=' \x01\x00', 0x9c, 0x700, 0xfe67, 0xbe}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xff, 0xff, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, 0x0, 0x12c, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004095}, 0x41) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x93, 0x30, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x90, 0xd26b, 0xdcc9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0x5, 0x20, @mcast2, @rand_addr=' \x01\x00', 0x9c, 0x700, 0xfe67, 0xbe}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xff, 0xff, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x7fffffff}}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, 0x0, 0x12c, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004095}, 0x41) (async) 17:52:46 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf00}, 0x0) 17:52:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x20}}, 0x0) 17:52:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 636.041042][T23228] loop3: detected capacity change from 0 to 194169 [ 636.094048][T23229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 636.257999][T23228] NILFS (loop3): couldn't find nilfs on the device 17:52:47 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, 0x20}}, 0x0) 17:52:47 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x93, 0x30, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x90, 0xd26b, 0xdcc9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0x5, 0x20, @mcast2, @rand_addr=' \x01\x00', 0x9c, 0x700, 0xfe67, 0xbe}}) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000045c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000000000000c00e0000a0001006261736963"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xff, 0xff, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x5, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, 0x0, 0x12c, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004095}, 0x41) 17:52:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x1f00}, 0x0) [ 636.600710][T23258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) 17:52:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:47 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b10020007c0600"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r4, 0x9) syz_open_procfs(r4, &(0x7f0000000180)='net/udplite\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x1b26790c}, {&(0x7f00000001c0)="3e026f781a12d6bb2d8571a338a96b16c1cbe8c9dce1323be3651259477a2cd59ae19e3c982a929e94bd063ced345bfc9307a81b704913cf744563499574999a547be7148bca6ce57a07c23105ec6a4899c350ba8c1e34790377dc1e81490f", 0x5f, 0xffffffffffff8001}], 0x10000, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nodiscard}, {@snapshot={'snapshot', 0x3d, 0x3}}, {@order_relaxed}, {}, {@order_strict}, {@order_relaxed}, {@order_strict}, {@norecovery}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r![#'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-@('}}]}) r7 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x106) dup3(r6, r7, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b10020007c0600"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) (async) getpgid(0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) (async) ptrace$peekuser(0x3, r4, 0x9) (async) syz_open_procfs(r4, &(0x7f0000000180)='net/udplite\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x1b26790c}, {&(0x7f00000001c0)="3e026f781a12d6bb2d8571a338a96b16c1cbe8c9dce1323be3651259477a2cd59ae19e3c982a929e94bd063ced345bfc9307a81b704913cf744563499574999a547be7148bca6ce57a07c23105ec6a4899c350ba8c1e34790377dc1e81490f", 0x5f, 0xffffffffffff8001}], 0x10000, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nodiscard}, {@snapshot={'snapshot', 0x3d, 0x3}}, {@order_relaxed}, {}, {@order_strict}, {@order_relaxed}, {@order_strict}, {@norecovery}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r![#'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-@('}}]}) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x106) (async) dup3(r6, r7, 0x0) (async) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:47 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) fallocate(r3, 0x22, 0x8000, 0xfffffffffffff001) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000280)={[{0x7f, 0x4, 0x5, 0x20, 0x9, 0x20, 0x5, 0xfe, 0xba, 0x5b, 0x3, 0x0, 0xffff}, {0x1000, 0x4, 0xee, 0x1, 0x17, 0x8, 0x5, 0x5, 0x7, 0x6, 0x5, 0xf8, 0x10000}, {0x5, 0x3, 0xa1, 0x80, 0x6, 0x2, 0x2, 0x3, 0x35, 0x4, 0xfb, 0x8, 0x4}], 0x80000000}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x89f7, &(0x7f0000000200)="4762b2d1005fae9157a44b1bba2741063fd1b8712a921bce8d24873f8da2336e0ed62d1f5dd1ad47162e0108c53063964b8686d46bad50b4f5c72fa63f80e4e188e7a775574dbd3c0ee696fdc81b675c0cea64ae35c140a162999cec099b6963d317ce487714a145c4dbbf39a88b2ddaad2b9b321e8c9433d7") ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB='/t$B'], 0x20}}, 0x0) syz_io_uring_complete(0x0) 17:52:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, 0x20}}, 0x0) 17:52:47 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3f00}, 0x0) 17:52:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, 0x20}}, 0x0) 17:52:47 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 637.179065][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 637.206097][T23285] loop3: detected capacity change from 0 to 194169 [ 637.277826][T23285] NILFS (loop3): couldn't find nilfs on the device [ 637.437083][T23294] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) (async, rerun: 64) r3 = epoll_create1(0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x6) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async, rerun: 32) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, 0x20}}, 0x0) 17:52:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) (async) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) (async) fallocate(r3, 0x22, 0x8000, 0xfffffffffffff001) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000280)={[{0x7f, 0x4, 0x5, 0x20, 0x9, 0x20, 0x5, 0xfe, 0xba, 0x5b, 0x3, 0x0, 0xffff}, {0x1000, 0x4, 0xee, 0x1, 0x17, 0x8, 0x5, 0x5, 0x7, 0x6, 0x5, 0xf8, 0x10000}, {0x5, 0x3, 0xa1, 0x80, 0x6, 0x2, 0x2, 0x3, 0x35, 0x4, 0xfb, 0x8, 0x4}], 0x80000000}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x89f7, &(0x7f0000000200)="4762b2d1005fae9157a44b1bba2741063fd1b8712a921bce8d24873f8da2336e0ed62d1f5dd1ad47162e0108c53063964b8686d46bad50b4f5c72fa63f80e4e188e7a775574dbd3c0ee696fdc81b675c0cea64ae35c140a162999cec099b6963d317ce487714a145c4dbbf39a88b2ddaad2b9b321e8c9433d7") (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB='/t$B'], 0x20}}, 0x0) (async) syz_io_uring_complete(0x0) 17:52:48 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b10020007c0600"}) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x1}, 0x5, 0x40, 0x1, r4, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x81, 0x4, 0xa77]}) ptrace$peekuser(0x3, r4, 0x9) syz_open_procfs(r4, &(0x7f0000000180)='net/udplite\x00') (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x1b26790c}, {&(0x7f00000001c0)="3e026f781a12d6bb2d8571a338a96b16c1cbe8c9dce1323be3651259477a2cd59ae19e3c982a929e94bd063ced345bfc9307a81b704913cf744563499574999a547be7148bca6ce57a07c23105ec6a4899c350ba8c1e34790377dc1e81490f", 0x5f, 0xffffffffffff8001}], 0x10000, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nodiscard}, {@snapshot={'snapshot', 0x3d, 0x3}}, {@order_relaxed}, {}, {@order_strict}, {@order_relaxed}, {@order_strict}, {@norecovery}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\r![#'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-@('}}]}) (async, rerun: 64) r7 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x106) (rerun: 64) dup3(r6, r7, 0x0) (async, rerun: 64) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 17:52:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x6000}, 0x0) [ 637.632509][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 637.723059][T23323] loop3: detected capacity change from 0 to 194169 17:52:48 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 637.838288][T23317] ptm ptm3: ldisc open failed (-12), clearing slot 3 17:52:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, 0x20}}, 0x0) 17:52:48 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x7ff}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000100)) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:48 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000100)) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) fallocate(r3, 0x22, 0x8000, 0xfffffffffffff001) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000280)={[{0x7f, 0x4, 0x5, 0x20, 0x9, 0x20, 0x5, 0xfe, 0xba, 0x5b, 0x3, 0x0, 0xffff}, {0x1000, 0x4, 0xee, 0x1, 0x17, 0x8, 0x5, 0x5, 0x7, 0x6, 0x5, 0xf8, 0x10000}, {0x5, 0x3, 0xa1, 0x80, 0x6, 0x2, 0x2, 0x3, 0x35, 0x4, 0xfb, 0x8, 0x4}], 0x80000000}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r4, 0x89f7, &(0x7f0000000200)="4762b2d1005fae9157a44b1bba2741063fd1b8712a921bce8d24873f8da2336e0ed62d1f5dd1ad47162e0108c53063964b8686d46bad50b4f5c72fa63f80e4e188e7a775574dbd3c0ee696fdc81b675c0cea64ae35c140a162999cec099b6963d317ce487714a145c4dbbf39a88b2ddaad2b9b321e8c9433d7") (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB='/t$B'], 0x20}}, 0x0) (async) syz_io_uring_complete(0x0) 17:52:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 17:52:48 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x840b}, 0x0) 17:52:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x20}}, 0x0) [ 638.244962][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r1, 0x0, r2) syz_open_pts(r4, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x310a0000}}, 0x20}}, 0x0) 17:52:49 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010c0000000000000000210000000c009900ff0100004b00000034002d800a00000001010101010100000a00000002020202020200000a00000002020202020200000a0000000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) [ 638.523762][T14198] I/O error, dev loop3, sector 193920 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 17:52:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9605}, 0x0) 17:52:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}, 0x20}}, 0x0) [ 638.749008][ T26] audit: type=1400 audit(1644688369.400:752): avc: denied { ioctl } for pid=23378 comm="syz-executor.2" path="socket:[90564]" dev="sockfs" ino=90564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 17:52:49 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x7ff}) pipe(0x0) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 32) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000100)) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}}, 0x20}}, 0x0) 17:52:50 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010c0000000000000000210000000c009900ff0100004b00000034002d800a00000001010101010100000a00000002020202020200000a00000002020202020200000a0000000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17:52:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe703}, 0x0) 17:52:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}}, 0x20}}, 0x0) 17:52:50 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) (async, rerun: 32) r4 = fcntl$dupfd(r1, 0x0, r2) (rerun: 32) syz_open_pts(r4, 0x4000) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:50 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010c0000000000000000210000000c009900ff0100004b00000034002d800a00000001010101010100000a00000002020202020200000a00000002020202020200000a0000000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="010c0000000000000000210000000c009900ff0100004b00000034002d800a00000001010101010100000a00000002020202020200000a00000002020202020200000a0000000101010101010000"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff}}, 0x20}}, 0x0) 17:52:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf000}, 0x0) 17:52:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}, 0x20}}, 0x0) 17:52:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x7ff}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000100)) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x0, 0x7ff}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000100)) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 17:52:50 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xff00}, 0x0) 17:52:50 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x26, 0x80000, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:52:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888}}, 0x20}}, 0x0) 17:52:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r1, 0x0, r2) syz_open_pts(r4, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) fcntl$dupfd(r1, 0x0, r2) (async) syz_open_pts(r4, 0x4000) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x26, 0x80000, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:52:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 17:52:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x30000}, 0x0) 17:52:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x26, 0x80000, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) [ 640.751931][T23493] ptm ptm3: ldisc open failed (-12), clearing slot 3 17:52:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}}, 0x4015) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) 17:52:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 17:52:51 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) r2 = userfaultfd(0x80801) readv(r2, &(0x7f0000000100), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = epoll_create1(0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) write$rfkill(r6, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf0ffff}, 0x0) 17:52:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0000000}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00082bbd420b36005a8997df4d458900"/37], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x8000, 0x3, 0x7e43, 0x20, 0xc, "8b585c4d8662d2cb7fdf673d419e27411b471a"}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x41, &(0x7f0000000100)="8dbf33125427012c2c0f1ec695cd444c13c136e8fb4ae420e7d997c0cb970ea34cdd196b4c99405489e6eab76bbafe42f758f12b9f98b6a78008721b86bcb374ab", 0x3f, 0x0, &(0x7f0000000080)="8349df18f12d1803db1e9d2db01e768d4278c2147ece251657faae2c1dd80723bd2009d0a0e3c067f50463422bd900e907d636063396b1952e241871700789"}) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:52:51 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) [ 641.179451][T23530] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}}, 0x4015) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}}, 0x4015) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) (async) 17:52:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 17:52:52 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x1000000}, 0x0) 17:52:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x20}}, 0x0) 17:52:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x9}}, 0x0) 17:52:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}}, 0x4015) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) 17:52:52 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) (async) r2 = userfaultfd(0x80801) readv(r2, &(0x7f0000000100), 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = epoll_create1(0x0) (async) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) (async) write$rfkill(r6, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0xf}}, 0x0) 17:52:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0000000}) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00082bbd420b36005a8997df4d458900"/37], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x8000, 0x3, 0x7e43, 0x20, 0xc, "8b585c4d8662d2cb7fdf673d419e27411b471a"}) (async) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) (async, rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x41, &(0x7f0000000100)="8dbf33125427012c2c0f1ec695cd444c13c136e8fb4ae420e7d997c0cb970ea34cdd196b4c99405489e6eab76bbafe42f758f12b9f98b6a78008721b86bcb374ab", 0x3f, 0x0, &(0x7f0000000080)="8349df18f12d1803db1e9d2db01e768d4278c2147ece251657faae2c1dd80723bd2009d0a0e3c067f50463422bd900e907d636063396b1952e241871700789"}) (rerun: 64) read(0xffffffffffffffff, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:52:52 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:52 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x2000000}, 0x0) 17:52:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0xc0}}, 0x0) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0xec0}}, 0x0) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x33fe0}}, 0x0) 17:52:53 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 17:52:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x200003a0}}, 0x0) 17:52:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r0, 0xc01, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ibss={0x6, 0x2, 0x4e}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x5, 0xc9, @device_a, 0x8, 0x1, 0xffff}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="37ac548cf58c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2391e2441adb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 17:52:53 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) r2 = userfaultfd(0x80801) readv(r2, &(0x7f0000000100), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = syz_open_pts(r1, 0x0) r5 = epoll_create1(0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) write$rfkill(r6, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e) (async) userfaultfd(0x80801) (async) readv(r2, &(0x7f0000000100), 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) fcntl$dupfd(r0, 0x0, r2) (async) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r6, 0x100000001, 0x0, 0x2811fdff) (async) write$rfkill(r6, &(0x7f0000000100)={0x9, 0x1, 0x0, 0x0, 0x1}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x7ffff000}}, 0x0) 17:52:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0000000}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00082bbd420b36005a8997df4d458900"/37], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x8000, 0x3, 0x7e43, 0x20, 0xc, "8b585c4d8662d2cb7fdf673d419e27411b471a"}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x41, &(0x7f0000000100)="8dbf33125427012c2c0f1ec695cd444c13c136e8fb4ae420e7d997c0cb970ea34cdd196b4c99405489e6eab76bbafe42f758f12b9f98b6a78008721b86bcb374ab", 0x3f, 0x0, &(0x7f0000000080)="8349df18f12d1803db1e9d2db01e768d4278c2147ece251657faae2c1dd80723bd2009d0a0e3c067f50463422bd900e907d636063396b1952e241871700789"}) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r0, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0000000}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x5}]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00082bbd420b36005a8997df4d458900"/37], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x8000, 0x3, 0x7e43, 0x20, 0xc, "8b585c4d8662d2cb7fdf673d419e27411b471a"}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) (async) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{}, {}, {}, {}]}) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x41, &(0x7f0000000100)="8dbf33125427012c2c0f1ec695cd444c13c136e8fb4ae420e7d997c0cb970ea34cdd196b4c99405489e6eab76bbafe42f758f12b9f98b6a78008721b86bcb374ab", 0x3f, 0x0, &(0x7f0000000080)="8349df18f12d1803db1e9d2db01e768d4278c2147ece251657faae2c1dd80723bd2009d0a0e3c067f50463422bd900e907d636063396b1952e241871700789"}) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) 17:52:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r0, 0xc01, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ibss={0x6, 0x2, 0x4e}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x5, 0xc9, @device_a, 0x8, 0x1, 0xffff}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="37ac548cf58c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2391e2441adb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 17:52:53 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 17:52:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0xfffffdef}}, 0x0) 17:52:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r0, 0xc01, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ibss={0x6, 0x2, 0x4e}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x5, 0xc9, @device_a, 0x8, 0x1, 0xffff}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="37ac548cf58c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2391e2441adb"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 17:52:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x2}, 0x0) [ 643.345964][T23644] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 643.410280][T23615] warn_alloc: 5 callbacks suppressed [ 643.410298][T23615] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 643.483131][T23637] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 643.514925][T23615] ,cpuset=syz3,mems_allowed=0-1 [ 643.575689][T23615] CPU: 1 PID: 23615 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 643.586237][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.596306][T23615] Call Trace: [ 643.599595][T23615] [ 643.602533][T23615] dump_stack_lvl+0xcd/0x134 [ 643.607143][T23615] warn_alloc.cold+0x9b/0x189 [ 643.611839][T23615] ? zone_watermark_ok_safe+0x290/0x290 [ 643.617404][T23615] ? __vmalloc_node_range+0x7bf/0x1060 [ 643.622880][T23615] __vmalloc_node_range+0xe1e/0x1060 [ 643.628178][T23615] ? vfree_atomic+0xe0/0xe0 [ 643.632714][T23615] ? rcu_read_lock_sched_held+0x3a/0x70 [ 643.638269][T23615] ? kmem_cache_alloc_node+0x3ce/0x590 [ 643.643744][T23615] ? kernel_clone+0xe7/0xab0 [ 643.648341][T23615] copy_process+0x926/0x7300 [ 643.652935][T23615] ? kernel_clone+0xe7/0xab0 [ 643.657533][T23615] ? lock_chain_count+0x20/0x20 [ 643.662396][T23615] ? lock_chain_count+0x20/0x20 [ 643.667261][T23615] ? find_held_lock+0x2d/0x110 [ 643.672046][T23615] ? __cleanup_sighand+0xb0/0xb0 [ 643.676998][T23615] ? lock_downgrade+0x6e0/0x6e0 [ 643.681859][T23615] ? __lock_acquire+0x1655/0x5470 [ 643.686897][T23615] ? kernel_clone+0x314/0xab0 [ 643.691576][T23615] kernel_clone+0xe7/0xab0 [ 643.695998][T23615] ? create_io_thread+0xf0/0xf0 [ 643.700855][T23615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 643.706845][T23615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 643.712836][T23615] ? find_held_lock+0x2d/0x110 [ 643.717611][T23615] __do_sys_clone+0xc8/0x110 [ 643.722208][T23615] ? kernel_clone+0xab0/0xab0 [ 643.726896][T23615] ? lock_downgrade+0x6e0/0x6e0 [ 643.731758][T23615] ? syscall_enter_from_user_mode+0x21/0x70 [ 643.737677][T23615] do_syscall_64+0x35/0xb0 [ 643.742111][T23615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 643.748016][T23615] RIP: 0033:0x7fd1fe952481 [ 643.752434][T23615] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 643.772039][T23615] RSP: 002b:00007ffe23536418 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 643.780449][T23615] RAX: ffffffffffffffda RBX: 00007fd1fd0d7700 RCX: 00007fd1fe952481 [ 643.788414][T23615] RDX: 00007fd1fd0d79d0 RSI: 00007fd1fd0d72f0 RDI: 00000000003d0f00 [ 643.796378][T23615] RBP: 00007ffe23536660 R08: 00007fd1fd0d7700 R09: 00007fd1fd0d7700 [ 643.804339][T23615] R10: 00007fd1fd0d79d0 R11: 0000000000000206 R12: 00007ffe235364ce [ 643.812301][T23615] R13: 00007ffe235364cf R14: 00007fd1fd0d7300 R15: 0000000000022000 [ 643.820267][T23615] 17:52:54 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000440)={r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb4\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "43c2115b281651ca186228edfe519aa173dd6b869623a6e05c93b771683f6121581f8a2dce4628d4c1f0aaa2ab6a1436f8812ae4a1e665c9af799217ab5293908dde76e0af959000edc9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x633}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "518bccd7fc4da690c302f5efbbbfa9144f3afca35574ad86e29bd7e9b0c73e57060bf006383140b50d29d92b47452cfa11411a2137826156d165d0492215680938d59cc4421d93c2f90ad4c17399ec01f0af270f8dc59f030f1cdca7ed977de46cbadbbc088f67c607a036a84b0201cf33a95017db76deb5feb1499ec05714bec445d597471322e621298dfed388a52103d94e26cd7aa472e34100b6ec3a4efcaa0d1e55d43854dd5334582b64619769db293c37ac4042203a750883774d8ef2f69f73376e30ef7589cee77171ce8deca8705242bfcb"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "98c37748cde03ec212e7b3aebc40b69849c39ff1b0d1e8be5fe3860b4210f64c50482196b9c711a962445640b3b782a6e9130ff0a7b6e12a14df9224b480c6"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.})\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\':#/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa41}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d4}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x201}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf2501000004000000000b000000000c001473797a3100000000"], 0x28}}, 0x4000) 17:52:54 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x1, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:54 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x5000000}, 0x0) [ 643.828134][T23615] Mem-Info: [ 643.831277][T23615] active_anon:4531 inactive_anon:152521 isolated_anon:0 [ 643.831277][T23615] active_file:4984 inactive_file:7539 isolated_file:0 [ 643.831277][T23615] unevictable:768 dirty:91 writeback:0 [ 643.831277][T23615] slab_reclaimable:21973 slab_unreclaimable:115442 [ 643.831277][T23615] mapped:27626 shmem:6033 pagetables:865 bounce:0 [ 643.831277][T23615] kernel_misc_reclaimable:0 [ 643.831277][T23615] free:1295233 free_pcp:9670 free_cma:0 [ 643.942181][T23615] Node 0 active_anon:18116kB inactive_anon:611400kB active_file:19888kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110436kB dirty:356kB writeback:0kB shmem:21660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB kernel_stack:10476kB pagetables:3536kB all_unreclaimable? no [ 644.007959][T23615] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 644.061253][T23615] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.090726][T23615] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 644.097062][T23615] Node 0 DMA32 free:1218408kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18116kB inactive_anon:611400kB active_file:19888kB inactive_file:30152kB unevictable:1536kB writepending:356kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:35544kB local_pcp:14996kB free_cma:0kB [ 644.129249][T23615] lowmem_reserve[]: 0 0 0 0 0 [ 644.134255][T23615] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.181894][T23615] lowmem_reserve[]: 0 0 0 0 0 [ 644.190608][T23615] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 644.221850][T23615] lowmem_reserve[]: 0 0 0 0 0 [ 644.226828][T23615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 644.241233][T23615] Node 0 DMA32: 1378*4kB (UME) 790*8kB (UME) 923*16kB (UME) 516*32kB (UME) 180*64kB (UME) 56*128kB (UME) 22*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 277*4096kB (UM) = 1218408kB [ 644.260374][T23615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 644.274867][T23615] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 644.292865][T23615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.302605][T23615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.312138][T23615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 644.321986][T23615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 644.339623][T23615] 18563 total pagecache pages [ 644.345680][T23615] 0 pages in swap cache [ 644.349841][T23615] Swap cache stats: add 0, delete 0, find 0/0 [ 644.362588][T23615] Free swap = 0kB [ 644.367752][T23615] Total swap = 0kB [ 644.371482][T23615] 2097051 pages RAM [ 644.382642][T23615] 0 pages HighMem/MovableOnly 17:52:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) epoll_create1(0x0) r2 = syz_open_dev$audion(&(0x7f0000001480), 0x0, 0x82400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) r5 = syz_open_dev$sg(&(0x7f00000017c0), 0x200, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000014c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xfff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000180)="7bb3b59b1d05d789b328bf4c1dd6ae267d326932782dd50eb1cc4b984f22e44f1f2fd184687b3814444327bfc3324d2c7b386def14784b8ceae3a7af88797fdf98d6572d6318041456e25fa7d28d61290a1f76db3a88", 0x56, 0x4d9ef836}, {&(0x7f0000000200)="9bc0b8050e8317cd4400ed1188731b601c8bbb9e1cd6c5a01a0b500e73d6ba174e49bb6cbd80a47461e337e6534e34ab9e295ae67d333c2b97227d89bb0316d390d814df3e6390b056df3fe57f3d3a9605781a0a1faba32ee9ae7d6b6ef176f5f7b2e2b5f9c9e9fe6880d798a1aa733818ca23", 0x73, 0x7361b693}, {&(0x7f0000000280)="d538c2e70260e1074df90b4427dafe595e037c176def7bca1aeb431301d1f0e4ad044a0fabad049e5d00989d5faac5aa0a55ee71a00a0f038d3beeee01465acdde1dd26649b219ce018c4f8cbddd6a4b5d867be74f69fa9057f3df7fd4fc24b374782f8d3055bfa8657c9f34c2", 0x6d, 0x4de}, {&(0x7f0000000400)="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", 0x1000, 0x1ff}], 0x4040, &(0x7f0000001400)={[{@fat=@debug}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rfkill\x00'}}, {@obj_role={'obj_role', 0x3d, '-)\'-'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rfkill\x00'}}]}) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x2, 0x2, 0x37, 0x3, 0xffffffffffffffff}) [ 644.390222][T23615] 384533 pages reserved [ 644.401200][T23615] 0 pages cma reserved 17:52:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x7}, 0x0) 17:52:55 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000440)={r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb4\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "43c2115b281651ca186228edfe519aa173dd6b869623a6e05c93b771683f6121581f8a2dce4628d4c1f0aaa2ab6a1436f8812ae4a1e665c9af799217ab5293908dde76e0af959000edc9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x633}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "518bccd7fc4da690c302f5efbbbfa9144f3afca35574ad86e29bd7e9b0c73e57060bf006383140b50d29d92b47452cfa11411a2137826156d165d0492215680938d59cc4421d93c2f90ad4c17399ec01f0af270f8dc59f030f1cdca7ed977de46cbadbbc088f67c607a036a84b0201cf33a95017db76deb5feb1499ec05714bec445d597471322e621298dfed388a52103d94e26cd7aa472e34100b6ec3a4efcaa0d1e55d43854dd5334582b64619769db293c37ac4042203a750883774d8ef2f69f73376e30ef7589cee77171ce8deca8705242bfcb"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "98c37748cde03ec212e7b3aebc40b69849c39ff1b0d1e8be5fe3860b4210f64c50482196b9c711a962445640b3b782a6e9130ff0a7b6e12a14df9224b480c6"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.})\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\':#/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa41}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d4}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x201}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf2501000004000000000b000000000c001473797a3100000000"], 0x28}}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000440)={r4}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb4\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "43c2115b281651ca186228edfe519aa173dd6b869623a6e05c93b771683f6121581f8a2dce4628d4c1f0aaa2ab6a1436f8812ae4a1e665c9af799217ab5293908dde76e0af959000edc9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x633}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "518bccd7fc4da690c302f5efbbbfa9144f3afca35574ad86e29bd7e9b0c73e57060bf006383140b50d29d92b47452cfa11411a2137826156d165d0492215680938d59cc4421d93c2f90ad4c17399ec01f0af270f8dc59f030f1cdca7ed977de46cbadbbc088f67c607a036a84b0201cf33a95017db76deb5feb1499ec05714bec445d597471322e621298dfed388a52103d94e26cd7aa472e34100b6ec3a4efcaa0d1e55d43854dd5334582b64619769db293c37ac4042203a750883774d8ef2f69f73376e30ef7589cee77171ce8deca8705242bfcb"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "98c37748cde03ec212e7b3aebc40b69849c39ff1b0d1e8be5fe3860b4210f64c50482196b9c711a962445640b3b782a6e9130ff0a7b6e12a14df9224b480c6"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.})\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\':#/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa41}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d4}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x201}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf2501000004000000000b000000000c001473797a3100000000"], 0x28}}, 0x4000) (async) 17:52:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x6000000}, 0x0) 17:52:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x8}, 0x0) 17:52:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x300}, 0x0) 17:52:55 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x10) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000440)={r4}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async, rerun: 32) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb4\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "43c2115b281651ca186228edfe519aa173dd6b869623a6e05c93b771683f6121581f8a2dce4628d4c1f0aaa2ab6a1436f8812ae4a1e665c9af799217ab5293908dde76e0af959000edc9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x633}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "518bccd7fc4da690c302f5efbbbfa9144f3afca35574ad86e29bd7e9b0c73e57060bf006383140b50d29d92b47452cfa11411a2137826156d165d0492215680938d59cc4421d93c2f90ad4c17399ec01f0af270f8dc59f030f1cdca7ed977de46cbadbbc088f67c607a036a84b0201cf33a95017db76deb5feb1499ec05714bec445d597471322e621298dfed388a52103d94e26cd7aa472e34100b6ec3a4efcaa0d1e55d43854dd5334582b64619769db293c37ac4042203a750883774d8ef2f69f73376e30ef7589cee77171ce8deca8705242bfcb"}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "98c37748cde03ec212e7b3aebc40b69849c39ff1b0d1e8be5fe3860b4210f64c50482196b9c711a962445640b3b782a6e9130ff0a7b6e12a14df9224b480c6"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.})\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\':#/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa41}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d4}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async, rerun: 32) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x201}, 0x1c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000126bd7000fedbdf2501000004000000000b000000000c001473797a3100000000"], 0x28}}, 0x4000) 17:52:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x7000000}, 0x0) [ 644.671933][T23699] loop3: detected capacity change from 0 to 264192 17:52:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0xffffff1f}, 0x0) [ 644.742717][T23699] FAT-fs (loop3): Unrecognized mount option "smackfstransmute=/dev/rfkill" or missing value 17:52:55 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x1, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x33}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:56 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) epoll_create1(0x0) (async) r2 = syz_open_dev$audion(&(0x7f0000001480), 0x0, 0x82400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) r5 = syz_open_dev$sg(&(0x7f00000017c0), 0x200, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000014c0)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xfff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000180)="7bb3b59b1d05d789b328bf4c1dd6ae267d326932782dd50eb1cc4b984f22e44f1f2fd184687b3814444327bfc3324d2c7b386def14784b8ceae3a7af88797fdf98d6572d6318041456e25fa7d28d61290a1f76db3a88", 0x56, 0x4d9ef836}, {&(0x7f0000000200)="9bc0b8050e8317cd4400ed1188731b601c8bbb9e1cd6c5a01a0b500e73d6ba174e49bb6cbd80a47461e337e6534e34ab9e295ae67d333c2b97227d89bb0316d390d814df3e6390b056df3fe57f3d3a9605781a0a1faba32ee9ae7d6b6ef176f5f7b2e2b5f9c9e9fe6880d798a1aa733818ca23", 0x73, 0x7361b693}, {&(0x7f0000000280)="d538c2e70260e1074df90b4427dafe595e037c176def7bca1aeb431301d1f0e4ad044a0fabad049e5d00989d5faac5aa0a55ee71a00a0f038d3beeee01465acdde1dd26649b219ce018c4f8cbddd6a4b5d867be74f69fa9057f3df7fd4fc24b374782f8d3055bfa8657c9f34c2", 0x6d, 0x4de}, {&(0x7f0000000400)="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", 0x1000, 0x1ff}], 0x4040, &(0x7f0000001400)={[{@fat=@debug}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rfkill\x00'}}, {@obj_role={'obj_role', 0x3d, '-)\'-'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rfkill\x00'}}]}) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x2, 0x2, 0x37, 0x3, 0xffffffffffffffff}) 17:52:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x2}, 0x0) 17:52:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r3 = eventfd2(0x0, 0x800) io_setup(0x80, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="85c647ea274b8cb0", 0x8}]) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x200000, 0x20) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f00000007c0)=""/4096) r10 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r10, 0x100000001, 0x0, 0x2811fdff) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x2000) io_submit(r4, 0x6, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfe01, r1, &(0x7f0000000000)="743c5ce93c5ce6fd99c7742e44854bec3de30cefb14f80ea69f5a2a0400cfd0fc9637513085ee51a49945ceba528a797d6a7651d2947678a5c4ec1dab96764b5f547c6b08b34", 0x46, 0x40, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xe80d, r6, &(0x7f0000000200)="a7d2e3bbe791f62810a46e7b9ae81952711dfd9e5e84015ad55da2f616761984a3fae11c409f1f8504b952b1f21cb67155c5e5f59e640a752fde57fbeba3f947e9d3af7fb82476a3a1749747fced0c7f9df23d1eba459c2df1ff4f424310ac48aea28afd9c3c74fcef9184ed7891681e69dba028688cefefe670403a2442437b3348cb1a6fff6517d3eb58a7af8ac2780c0162b9a44fe462e1d787e66439d91ec3e11cc46ba05d0cc30b3c5832f74d6f7f3f020bb72c2690651316acfc08750d22432c40d19dc8155158164e22101e8bc4109240", 0xd4, 0x6, 0x0, 0x3, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f00000003c0)="6913cd08a4cb1d2e11a216b617fd8a61f3ca83b263f46de4828a3b5b8d80919af4a90ee98a29faacbebfcde5246f3f8ddb705a519e1067aec0fe9344ebace38699f36da737a0f5929a73e49904063154da75c14099", 0x55, 0x401}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x7, r9, &(0x7f0000000480)="3bd5d69d4faa62786aedb0d5d10e37411c06b0f0eaaba78fa282fbd9958a14fa7eda282c50530a055cb5e2a76b7454ad0888c6376cdf1cff908d5fa7474657b373cd2e7cda45b8417fc14d86949f83d68f7b2cef8d79de93dfeb8d4d1ccbdab7dad2e4", 0x63, 0x8001, 0x0, 0x1, r10}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xc4c, r11, &(0x7f0000000580)="d839b5e5854f8add7f299a39af34ba7b6c0ea20a5f492a2aa387e77a087f6c513ecddbcc31b519225b231984123ecc1a7d894df9a6c6005fbe70a1181ad2212afceedb58cfa749b394dd2bf9b15ff020d66816d3", 0x54, 0xb2, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000640)="b6012cb351c08c0bc63b91add90f1e378f345ec9037dddbfb756f8aa1e49b80a7687afa5944e38f82ea1437ebbbeda2d741131c1eab8ec", 0x37, 0x1, 0x0, 0x1}]) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000700)='/dev/snd/controlC#\x00', &(0x7f0000000740)='[@-@\x00'], &(0x7f0000001800)=[&(0x7f00000017c0)='w\xc3/\x00']) 17:52:56 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x8000000}, 0x0) 17:52:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x3b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x3}, 0x0) [ 645.496534][T23739] loop3: detected capacity change from 0 to 264192 [ 645.562930][T23739] FAT-fs (loop3): Unrecognized mount option "smackfstransmute=/dev/rfkill" or missing value 17:52:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x4}, 0x0) 17:52:56 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:56 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9000000}, 0x0) 17:52:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) r3 = eventfd2(0x0, 0x800) io_setup(0x80, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="85c647ea274b8cb0", 0x8}]) (async) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x200000, 0x20) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f00000007c0)=""/4096) r10 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r10, 0x100000001, 0x0, 0x2811fdff) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x2000) io_submit(r4, 0x6, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfe01, r1, &(0x7f0000000000)="743c5ce93c5ce6fd99c7742e44854bec3de30cefb14f80ea69f5a2a0400cfd0fc9637513085ee51a49945ceba528a797d6a7651d2947678a5c4ec1dab96764b5f547c6b08b34", 0x46, 0x40, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xe80d, r6, &(0x7f0000000200)="a7d2e3bbe791f62810a46e7b9ae81952711dfd9e5e84015ad55da2f616761984a3fae11c409f1f8504b952b1f21cb67155c5e5f59e640a752fde57fbeba3f947e9d3af7fb82476a3a1749747fced0c7f9df23d1eba459c2df1ff4f424310ac48aea28afd9c3c74fcef9184ed7891681e69dba028688cefefe670403a2442437b3348cb1a6fff6517d3eb58a7af8ac2780c0162b9a44fe462e1d787e66439d91ec3e11cc46ba05d0cc30b3c5832f74d6f7f3f020bb72c2690651316acfc08750d22432c40d19dc8155158164e22101e8bc4109240", 0xd4, 0x6, 0x0, 0x3, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f00000003c0)="6913cd08a4cb1d2e11a216b617fd8a61f3ca83b263f46de4828a3b5b8d80919af4a90ee98a29faacbebfcde5246f3f8ddb705a519e1067aec0fe9344ebace38699f36da737a0f5929a73e49904063154da75c14099", 0x55, 0x401}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x7, r9, &(0x7f0000000480)="3bd5d69d4faa62786aedb0d5d10e37411c06b0f0eaaba78fa282fbd9958a14fa7eda282c50530a055cb5e2a76b7454ad0888c6376cdf1cff908d5fa7474657b373cd2e7cda45b8417fc14d86949f83d68f7b2cef8d79de93dfeb8d4d1ccbdab7dad2e4", 0x63, 0x8001, 0x0, 0x1, r10}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xc4c, r11, &(0x7f0000000580)="d839b5e5854f8add7f299a39af34ba7b6c0ea20a5f492a2aa387e77a087f6c513ecddbcc31b519225b231984123ecc1a7d894df9a6c6005fbe70a1181ad2212afceedb58cfa749b394dd2bf9b15ff020d66816d3", 0x54, 0xb2, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000640)="b6012cb351c08c0bc63b91add90f1e378f345ec9037dddbfb756f8aa1e49b80a7687afa5944e38f82ea1437ebbbeda2d741131c1eab8ec", 0x37, 0x1, 0x0, 0x1}]) (async) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000700)='/dev/snd/controlC#\x00', &(0x7f0000000740)='[@-@\x00'], &(0x7f0000001800)=[&(0x7f00000017c0)='w\xc3/\x00']) 17:52:56 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x1, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x40000d0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6}, 0x0) 17:52:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x8}, 0x0) 17:52:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xc000000}, 0x0) 17:52:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) epoll_create1(0x0) r2 = syz_open_dev$audion(&(0x7f0000001480), 0x0, 0x82400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) r5 = syz_open_dev$sg(&(0x7f00000017c0), 0x200, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000014c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xfff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000180)="7bb3b59b1d05d789b328bf4c1dd6ae267d326932782dd50eb1cc4b984f22e44f1f2fd184687b3814444327bfc3324d2c7b386def14784b8ceae3a7af88797fdf98d6572d6318041456e25fa7d28d61290a1f76db3a88", 0x56, 0x4d9ef836}, {&(0x7f0000000200)="9bc0b8050e8317cd4400ed1188731b601c8bbb9e1cd6c5a01a0b500e73d6ba174e49bb6cbd80a47461e337e6534e34ab9e295ae67d333c2b97227d89bb0316d390d814df3e6390b056df3fe57f3d3a9605781a0a1faba32ee9ae7d6b6ef176f5f7b2e2b5f9c9e9fe6880d798a1aa733818ca23", 0x73, 0x7361b693}, {&(0x7f0000000280)="d538c2e70260e1074df90b4427dafe595e037c176def7bca1aeb431301d1f0e4ad044a0fabad049e5d00989d5faac5aa0a55ee71a00a0f038d3beeee01465acdde1dd26649b219ce018c4f8cbddd6a4b5d867be74f69fa9057f3df7fd4fc24b374782f8d3055bfa8657c9f34c2", 0x6d, 0x4de}, {&(0x7f0000000400)="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", 0x1000, 0x1ff}], 0x4040, &(0x7f0000001400)={[{@fat=@debug}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rfkill\x00'}}, {@obj_role={'obj_role', 0x3d, '-)\'-'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rfkill\x00'}}]}) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x2, 0x2, 0x37, 0x3, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) syz_open_dev$audion(&(0x7f0000001480), 0x0, 0x82400) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) syz_open_dev$sg(&(0x7f00000017c0), 0x200, 0x200) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000014c0)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xfff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000180)="7bb3b59b1d05d789b328bf4c1dd6ae267d326932782dd50eb1cc4b984f22e44f1f2fd184687b3814444327bfc3324d2c7b386def14784b8ceae3a7af88797fdf98d6572d6318041456e25fa7d28d61290a1f76db3a88", 0x56, 0x4d9ef836}, {&(0x7f0000000200)="9bc0b8050e8317cd4400ed1188731b601c8bbb9e1cd6c5a01a0b500e73d6ba174e49bb6cbd80a47461e337e6534e34ab9e295ae67d333c2b97227d89bb0316d390d814df3e6390b056df3fe57f3d3a9605781a0a1faba32ee9ae7d6b6ef176f5f7b2e2b5f9c9e9fe6880d798a1aa733818ca23", 0x73, 0x7361b693}, {&(0x7f0000000280)="d538c2e70260e1074df90b4427dafe595e037c176def7bca1aeb431301d1f0e4ad044a0fabad049e5d00989d5faac5aa0a55ee71a00a0f038d3beeee01465acdde1dd26649b219ce018c4f8cbddd6a4b5d867be74f69fa9057f3df7fd4fc24b374782f8d3055bfa8657c9f34c2", 0x6d, 0x4de}, {&(0x7f0000000400)="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", 0x1000, 0x1ff}], 0x4040, &(0x7f0000001400)={[{@fat=@debug}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rfkill\x00'}}, {@obj_role={'obj_role', 0x3d, '-)\'-'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rfkill\x00'}}]}) (async) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x2, 0x2, 0x37, 0x3, 0xffffffffffffffff}) (async) 17:52:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) r3 = eventfd2(0x0, 0x800) (async) io_setup(0x80, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000640)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="85c647ea274b8cb0", 0x8}]) (async) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x200000, 0x20) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f00000007c0)=""/4096) (async) r10 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r10, 0x100000001, 0x0, 0x2811fdff) (async) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x2000) io_submit(r4, 0x6, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfe01, r1, &(0x7f0000000000)="743c5ce93c5ce6fd99c7742e44854bec3de30cefb14f80ea69f5a2a0400cfd0fc9637513085ee51a49945ceba528a797d6a7651d2947678a5c4ec1dab96764b5f547c6b08b34", 0x46, 0x40, 0x0, 0x1, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xe80d, r6, &(0x7f0000000200)="a7d2e3bbe791f62810a46e7b9ae81952711dfd9e5e84015ad55da2f616761984a3fae11c409f1f8504b952b1f21cb67155c5e5f59e640a752fde57fbeba3f947e9d3af7fb82476a3a1749747fced0c7f9df23d1eba459c2df1ff4f424310ac48aea28afd9c3c74fcef9184ed7891681e69dba028688cefefe670403a2442437b3348cb1a6fff6517d3eb58a7af8ac2780c0162b9a44fe462e1d787e66439d91ec3e11cc46ba05d0cc30b3c5832f74d6f7f3f020bb72c2690651316acfc08750d22432c40d19dc8155158164e22101e8bc4109240", 0xd4, 0x6, 0x0, 0x3, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f00000003c0)="6913cd08a4cb1d2e11a216b617fd8a61f3ca83b263f46de4828a3b5b8d80919af4a90ee98a29faacbebfcde5246f3f8ddb705a519e1067aec0fe9344ebace38699f36da737a0f5929a73e49904063154da75c14099", 0x55, 0x401}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x7, r9, &(0x7f0000000480)="3bd5d69d4faa62786aedb0d5d10e37411c06b0f0eaaba78fa282fbd9958a14fa7eda282c50530a055cb5e2a76b7454ad0888c6376cdf1cff908d5fa7474657b373cd2e7cda45b8417fc14d86949f83d68f7b2cef8d79de93dfeb8d4d1ccbdab7dad2e4", 0x63, 0x8001, 0x0, 0x1, r10}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xc4c, r11, &(0x7f0000000580)="d839b5e5854f8add7f299a39af34ba7b6c0ea20a5f492a2aa387e77a087f6c513ecddbcc31b519225b231984123ecc1a7d894df9a6c6005fbe70a1181ad2212afceedb58cfa749b394dd2bf9b15ff020d66816d3", 0x54, 0xb2, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x8001, r0, &(0x7f0000000640)="b6012cb351c08c0bc63b91add90f1e378f345ec9037dddbfb756f8aa1e49b80a7687afa5944e38f82ea1437ebbbeda2d741131c1eab8ec", 0x37, 0x1, 0x0, 0x1}]) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000700)='/dev/snd/controlC#\x00', &(0x7f0000000740)='[@-@\x00'], &(0x7f0000001800)=[&(0x7f00000017c0)='w\xc3/\x00']) 17:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xa}, 0x0) [ 646.538398][T23787] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 646.571707][T23787] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 646.660719][T23796] loop3: detected capacity change from 0 to 264192 17:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xc}, 0x0) [ 646.718852][T23796] FAT-fs (loop3): Unrecognized mount option "smackfstransmute=/dev/rfkill" or missing value 17:52:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe000000}, 0x0) 17:52:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r0, 0xc01, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 646.865622][T23799] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:57 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xc4b, 0x0) close_range(r4, r2, 0x0) 17:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xe}, 0x0) 17:52:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r0, 0xc01, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r0, 0xc01, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) (async) 17:52:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf}, 0x0) 17:52:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf000000}, 0x0) 17:52:57 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r0, 0xc01, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r0, 0xc01, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) (async) 17:52:57 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x10}, 0x0) 17:52:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x28c, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd8, 0x2a, [@cf={0x4, 0x6, {0x2, 0x20, 0xfff, 0x4}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x5, 0x1, 0x1, 0x1, 0x41}}, @rann={0x7e, 0x15, {{0x1}, 0x1, 0x5, @device_a, 0x3ff, 0x9, 0x557}}, @link_id={0x65, 0x12, {@random="8491a4eb3e5f", @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0xaa5b, 0x3}}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="7a6cf2fb6d150133535d8c204732c319"}}, @perr={0x84, 0x48, {0x1f, 0x4, [@ext={{}, @device_b, 0x8, @broadcast}, @not_ext={{}, @device_a, 0x3f, "", 0x29}, @ext={{}, @device_a, 0x2, @broadcast, 0x3f}, @ext={{}, @broadcast, 0x3, @device_b, 0x11}]}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x5}}, @ibss={0x6, 0x2, 0xfff7}, @ssid={0x0, 0x11, @random="c52a8e29573cbd91c03a03674ecebd516b"}]}, @NL80211_ATTR_IE={0x19d, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x9}}, @tim={0x5, 0x40, {0x32, 0x75, 0xe0, "40d6ed50bc7502a9e539113525bbd54ca4a7d1bf293ce919e64ce86074b05afaf724f89b31d33069a73edcc5dfa7229f0ebb81c713eac48cba890abef5"}}, @fast_bss_trans={0x37, 0x132, {0x8, 0x8, "9b77564d7f3d8e73995b44eb085cdde9", "f422eea049de15de5f5d98763c0fcb76ab1ccdc0b9e1df9473ddb04a364d4497", "2e3e8fb0922da00177f783f189bf11208204c2031b3f61cd61e1c12a257e67bb", [{0x1, 0x16, "5b0cf774279698092d653860384c6a6cb2660bb9dfa5"}, {0x2, 0x26, "0cd445e9d5fce2bf2123c3367dde6328c6ff3cf4eaa8d893f5b1510573de51c23cf83a85421c"}, {0x1, 0x11, "588db8533da7972f3604b47458492969ca"}, {0x2, 0x15, "53ad70304dd6e81d280e52f8c409cfa83394d93a8c"}, {0x1, 0xb, "6ee0bc375b59623f494ecb"}, {0x3, 0x1d, "db41a62d74dcd30dfff3061c20406295ac0dd413caf652efcac6177b5f"}, {0x2, 0x1f, "2da4b5d1bc037c5ecd857a9eff9b4cdf9938950c677961c6229d04ca267c77"}, {0x1, 0x27, "36f11de25d12501f968816c0387691e5ead763c3933178a09c926602b877fa9f4757790d765aea"}]}}, @supported_rates={0x1, 0x7, [{0x5}, {0x12}, {0x4}, {0x48, 0x1}, {0x48, 0x1}, {}, {0x30, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xeb0f7aadce20d60}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x67d1, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x60}, 0x0) 17:52:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x1f000000}, 0x0) 17:52:58 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xc4b, 0x0) close_range(r4, r2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r0, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000100), 0xc4b, 0x0) (async) close_range(r4, r2, 0x0) (async) 17:52:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf0}, 0x0) 17:52:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x28c, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd8, 0x2a, [@cf={0x4, 0x6, {0x2, 0x20, 0xfff, 0x4}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x5, 0x1, 0x1, 0x1, 0x41}}, @rann={0x7e, 0x15, {{0x1}, 0x1, 0x5, @device_a, 0x3ff, 0x9, 0x557}}, @link_id={0x65, 0x12, {@random="8491a4eb3e5f", @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0xaa5b, 0x3}}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="7a6cf2fb6d150133535d8c204732c319"}}, @perr={0x84, 0x48, {0x1f, 0x4, [@ext={{}, @device_b, 0x8, @broadcast}, @not_ext={{}, @device_a, 0x3f, "", 0x29}, @ext={{}, @device_a, 0x2, @broadcast, 0x3f}, @ext={{}, @broadcast, 0x3, @device_b, 0x11}]}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x5}}, @ibss={0x6, 0x2, 0xfff7}, @ssid={0x0, 0x11, @random="c52a8e29573cbd91c03a03674ecebd516b"}]}, @NL80211_ATTR_IE={0x19d, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x9}}, @tim={0x5, 0x40, {0x32, 0x75, 0xe0, "40d6ed50bc7502a9e539113525bbd54ca4a7d1bf293ce919e64ce86074b05afaf724f89b31d33069a73edcc5dfa7229f0ebb81c713eac48cba890abef5"}}, @fast_bss_trans={0x37, 0x132, {0x8, 0x8, "9b77564d7f3d8e73995b44eb085cdde9", "f422eea049de15de5f5d98763c0fcb76ab1ccdc0b9e1df9473ddb04a364d4497", "2e3e8fb0922da00177f783f189bf11208204c2031b3f61cd61e1c12a257e67bb", [{0x1, 0x16, "5b0cf774279698092d653860384c6a6cb2660bb9dfa5"}, {0x2, 0x26, "0cd445e9d5fce2bf2123c3367dde6328c6ff3cf4eaa8d893f5b1510573de51c23cf83a85421c"}, {0x1, 0x11, "588db8533da7972f3604b47458492969ca"}, {0x2, 0x15, "53ad70304dd6e81d280e52f8c409cfa83394d93a8c"}, {0x1, 0xb, "6ee0bc375b59623f494ecb"}, {0x3, 0x1d, "db41a62d74dcd30dfff3061c20406295ac0dd413caf652efcac6177b5f"}, {0x2, 0x1f, "2da4b5d1bc037c5ecd857a9eff9b4cdf9938950c677961c6229d04ca267c77"}, {0x1, 0x27, "36f11de25d12501f968816c0387691e5ead763c3933178a09c926602b877fa9f4757790d765aea"}]}}, @supported_rates={0x1, 0x7, [{0x5}, {0x12}, {0x4}, {0x48, 0x1}, {0x48, 0x1}, {}, {0x30, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xeb0f7aadce20d60}, 0x10) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x67d1, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x300}, 0x0) 17:52:58 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3f000000}, 0x0) [ 648.132208][T23871] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:52:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x600}, 0x0) 17:52:59 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (rerun: 32) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 17:52:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x28c, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd8, 0x2a, [@cf={0x4, 0x6, {0x2, 0x20, 0xfff, 0x4}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x5, 0x1, 0x1, 0x1, 0x41}}, @rann={0x7e, 0x15, {{0x1}, 0x1, 0x5, @device_a, 0x3ff, 0x9, 0x557}}, @link_id={0x65, 0x12, {@random="8491a4eb3e5f", @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0xaa5b, 0x3}}, @peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="7a6cf2fb6d150133535d8c204732c319"}}, @perr={0x84, 0x48, {0x1f, 0x4, [@ext={{}, @device_b, 0x8, @broadcast}, @not_ext={{}, @device_a, 0x3f, "", 0x29}, @ext={{}, @device_a, 0x2, @broadcast, 0x3f}, @ext={{}, @broadcast, 0x3, @device_b, 0x11}]}}, @channel_switch={0x25, 0x3, {0x1, 0x3, 0x5}}, @ibss={0x6, 0x2, 0xfff7}, @ssid={0x0, 0x11, @random="c52a8e29573cbd91c03a03674ecebd516b"}]}, @NL80211_ATTR_IE={0x19d, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x9}}, @tim={0x5, 0x40, {0x32, 0x75, 0xe0, "40d6ed50bc7502a9e539113525bbd54ca4a7d1bf293ce919e64ce86074b05afaf724f89b31d33069a73edcc5dfa7229f0ebb81c713eac48cba890abef5"}}, @fast_bss_trans={0x37, 0x132, {0x8, 0x8, "9b77564d7f3d8e73995b44eb085cdde9", "f422eea049de15de5f5d98763c0fcb76ab1ccdc0b9e1df9473ddb04a364d4497", "2e3e8fb0922da00177f783f189bf11208204c2031b3f61cd61e1c12a257e67bb", [{0x1, 0x16, "5b0cf774279698092d653860384c6a6cb2660bb9dfa5"}, {0x2, 0x26, "0cd445e9d5fce2bf2123c3367dde6328c6ff3cf4eaa8d893f5b1510573de51c23cf83a85421c"}, {0x1, 0x11, "588db8533da7972f3604b47458492969ca"}, {0x2, 0x15, "53ad70304dd6e81d280e52f8c409cfa83394d93a8c"}, {0x1, 0xb, "6ee0bc375b59623f494ecb"}, {0x3, 0x1d, "db41a62d74dcd30dfff3061c20406295ac0dd413caf652efcac6177b5f"}, {0x2, 0x1f, "2da4b5d1bc037c5ecd857a9eff9b4cdf9938950c677961c6229d04ca267c77"}, {0x1, 0x27, "36f11de25d12501f968816c0387691e5ead763c3933178a09c926602b877fa9f4757790d765aea"}]}}, @supported_rates={0x1, 0x7, [{0x5}, {0x12}, {0x4}, {0x48, 0x1}, {0x48, 0x1}, {}, {0x30, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xeb0f7aadce20d60}, 0x10) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x67d1, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9b389e47031f6a80b636532376577dd271ca2a43cdaa2511bea8fe9c7f4818ab5a66380b1e3f40dad6f06fe5af3ae469aca906d40e8c9b88aa7f80c27d4c5e4c8b4f65e1adc7723688eadc25394aaae8f6a6deef6430ffb5e41a1f7191de99f221bbf82aae1fd13f9a12e26db92ba23c55b2b9e3163e6219d9e9be10d057b2d5c158f19c45db6d1858bfac058b91beff8a7706a3297e70727f4642d1b5b4101255ca92871815369093927ecb4cd3d2e334da46b117ec6081ad47fcfb6db2c0d9efff35ac3d6c8a7fc39d0ea9190b986cb691c688741628245625ce735ab005451a15aad66fd955a70a33b6e2146249800225d2b82713e911640098e48dd0bcea26d7b53c99125d225733c467744c3b61edec4eea5fcd5125e00918", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:52:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xa00}, 0x0) 17:52:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x60000000}, 0x0) 17:52:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xa31}, 0x0) 17:52:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:59 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) socket$unix(0x1, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xc4b, 0x0) close_range(r4, r2, 0x0) 17:52:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xb8, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b998bacad0b30717fe1b506c21fe1f415b021e170d9e136c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "778fd9e43c637ee75b8f13d370fd372a6e9df832eb326174"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf20b77a4758fca2025cc94f8d43511b9fdce99295327a2e"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008055}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:52:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xc00}, 0x0) 17:52:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x840b0000}, 0x0) 17:52:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xe00}, 0x0) 17:52:59 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 64) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:52:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xb8, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b998bacad0b30717fe1b506c21fe1f415b021e170d9e136c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "778fd9e43c637ee75b8f13d370fd372a6e9df832eb326174"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf20b77a4758fca2025cc94f8d43511b9fdce99295327a2e"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008055}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:52:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:52:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf00}, 0x0) 17:52:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x96050000}, 0x0) 17:53:00 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000100)) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) close_range(r0, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x30000000}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x1002, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000240)={0x7, 0x9, 0xf8b, 0x7, 0x4, "10ffe968dc78dcf522b5176c777ced345e08ab"}) 17:53:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x310a}, 0x0) 17:53:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9effffff}, 0x0) 17:53:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xb8, r0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b998bacad0b30717fe1b506c21fe1f415b021e170d9e136c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "778fd9e43c637ee75b8f13d370fd372a6e9df832eb326174"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cf20b77a4758fca2025cc94f8d43511b9fdce99295327a2e"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008055}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x5865}, 0x0) 17:53:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6000}, 0x0) 17:53:00 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe7030000}, 0x0) 17:53:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x84) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf250600000500000000000000628fe89d24e06ce717"], 0x24}}, 0x20008040) 17:53:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:00 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6558}, 0x0) 17:53:01 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000100)) (async) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) close_range(r0, r4, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x30000000}) (async) r5 = open(&(0x7f0000000200)='./file0\x00', 0x1002, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000240)={0x7, 0x9, 0xf8b, 0x7, 0x4, "10ffe968dc78dcf522b5176c777ced345e08ab"}) 17:53:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x8100}, 0x0) 17:53:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0) 17:53:01 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x84) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf250600000500000000000000628fe89d24e06ce717"], 0x24}}, 0x20008040) 17:53:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf000}, 0x0) 17:53:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf0ffff}, 0x0) 17:53:01 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:01 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x84) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf250600000500000000000000628fe89d24e06ce717"], 0x24}}, 0x20008040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40040}, 0x84) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf250600000500000000000000628fe89d24e06ce717"], 0x24}}, 0x20008040) (async) 17:53:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfcffffff}, 0x0) 17:53:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x1000000}, 0x0) 17:53:02 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000100)) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) close_range(r0, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x30000000}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x1002, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000240)={0x7, 0x9, 0xf8b, 0x7, 0x4, "10ffe968dc78dcf522b5176c777ced345e08ab"}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000100)) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x80000) (async) close_range(r0, r4, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x30000000}) (async) open(&(0x7f0000000200)='./file0\x00', 0x1002, 0x1) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000240)={0x7, 0x9, 0xf8b, 0x7, 0x4, "10ffe968dc78dcf522b5176c777ced345e08ab"}) (async) 17:53:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x2000000}, 0x0) 17:53:02 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xff000000}, 0x0) 17:53:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000081, 0x40, 0x7fffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x40000) dup2(r2, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1aa0"], 0x20}}, 0x0) 17:53:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0xc}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x3000000}, 0x0) [ 651.787908][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:02 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000081, 0x40, 0x7fffffff) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x40000) (async, rerun: 32) dup2(r2, r3) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) (async, rerun: 32) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1aa0"], 0x20}}, 0x0) 17:53:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x4000000}, 0x0) 17:53:02 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async, rerun: 64) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfffff000}, 0x0) 17:53:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6000000}, 0x0) 17:53:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000081, 0x40, 0x7fffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x40000) dup2(r2, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1aa0"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000081, 0x40, 0x7fffffff) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0900000000000000006a82b97c000900010073797a3000000000080002400000000214000000110001"], 0x50}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x40000) (async) dup2(r2, r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) (async) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="1aa0"], 0x20}}, 0x0) (async) 17:53:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x8000000}, 0x0) [ 652.561432][T24120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000200000000000000000000000908000300", @ANYRES32=r3, @ANYBLOB="04002d88"], 0x20}}, 0x0) 17:53:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xa000000}, 0x0) 17:53:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x60}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) 17:53:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xc000000}, 0x0) 17:53:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) syz_open_pts(r4, 0x82200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000200000000000000000000000908000300", @ANYRES32=r3, @ANYBLOB="04002d88"], 0x20}}, 0x0) 17:53:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xe000000}, 0x0) 17:53:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0) 17:53:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf000000}, 0x0) 17:53:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000200000000000000000000000908000300", @ANYRES32=r3, @ANYBLOB="04002d88"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000200000000000000000000000908000300", @ANYRES32=r3, @ANYBLOB="04002d88"], 0x20}}, 0x0) (async) 17:53:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x44, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2bd57f1ec71b7a05d5602e892cfe1b81085895859ece37033e1f84f76f11c7b42e779ede64439e9383ba25ee0b72fae84ac11fc2f461e71ff40b87625baaebe5e02419389d7f76681f307e3f492ad39986cf1c800c7a8e44c36c8acaad9fbdcbe9c37a591d30130a91a5ef725911c7c3aec45", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:53:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x10000000}, 0x0) 17:53:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x44, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x4040080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2bd57f1ec71b7a05d5602e892cfe1b81085895859ece37033e1f84f76f11c7b42e779ede64439e9383ba25ee0b72fae84ac11fc2f461e71ff40b87625baaebe5e02419389d7f76681f307e3f492ad39986cf1c800c7a8e44c36c8acaad9fbdcbe9c37a591d30130a91a5ef725911c7c3aec45", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) 17:53:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0) 17:53:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) syz_open_pts(r4, 0x82200) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x310a0000}, 0x0) 17:53:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:04 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async, rerun: 32) r3 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x1) read(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 17:53:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x44, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2bd57f1ec71b7a05d5602e892cfe1b81085895859ece37033e1f84f76f11c7b42e779ede64439e9383ba25ee0b72fae84ac11fc2f461e71ff40b87625baaebe5e02419389d7f76681f307e3f492ad39986cf1c800c7a8e44c36c8acaad9fbdcbe9c37a591d30130a91a5ef725911c7c3aec45", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x44, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x4040080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2bd57f1ec71b7a05d5602e892cfe1b81085895859ece37033e1f84f76f11c7b42e779ede64439e9383ba25ee0b72fae84ac11fc2f461e71ff40b87625baaebe5e02419389d7f76681f307e3f492ad39986cf1c800c7a8e44c36c8acaad9fbdcbe9c37a591d30130a91a5ef725911c7c3aec45", @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="04002d80"], 0x20}}, 0x0) (async) 17:53:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfffffffc}, 0x0) 17:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x60000000}, 0x0) 17:53:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x149140) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000000021000000080003004b81d4a59cd8298bc2e50c2b5c849e4da6ac365ddc9d5195946592", @ANYRES32=r3, @ANYBLOB="04002d80", @ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="39b243", @ANYRES32=r2], 0x20}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x202400, 0x4, 0x11}, 0x18) write(r6, &(0x7f0000000200)="471c4d5ae471e715124630898353326d136aa7ea40d8fafab81184957c7cfd25cc1f07043a651c00cf9126e98cb8430fd2540c03f58dbeae6b2a82115b9f39717078707beec186ccc768d6d2e3ff63e27f7893a0896510de62cf0c7e8e85e88c8ed2017f9992b4edf1134a7913f38fdb2aa52f5db3d9d91f9903b784f1a898fbdba9ffd6fb65ff1e80f37b3dd6d9ccde3eaa7e9d25e4fefe4414a6d43ca3d71b9b866036c46f67b150a71dfb1b792dd07ac5a5839cc7dc0207db63274d7025eac5c66a83ad7fdd37e2b199bc0ee980e3b6551be28942a7e149f18b1699f8b4cb", 0xe0) 17:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x65580000}, 0x0) [ 654.519591][T24252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0) 17:53:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x149140) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000000021000000080003004b81d4a59cd8298bc2e50c2b5c849e4da6ac365ddc9d5195946592", @ANYRES32=r3, @ANYBLOB="04002d80", @ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="39b243", @ANYRES32=r2], 0x20}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x202400, 0x4, 0x11}, 0x18) write(r6, &(0x7f0000000200)="471c4d5ae471e715124630898353326d136aa7ea40d8fafab81184957c7cfd25cc1f07043a651c00cf9126e98cb8430fd2540c03f58dbeae6b2a82115b9f39717078707beec186ccc768d6d2e3ff63e27f7893a0896510de62cf0c7e8e85e88c8ed2017f9992b4edf1134a7913f38fdb2aa52f5db3d9d91f9903b784f1a898fbdba9ffd6fb65ff1e80f37b3dd6d9ccde3eaa7e9d25e4fefe4414a6d43ca3d71b9b866036c46f67b150a71dfb1b792dd07ac5a5839cc7dc0207db63274d7025eac5c66a83ad7fdd37e2b199bc0ee980e3b6551be28942a7e149f18b1699f8b4cb", 0xe0) 17:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x81000000}, 0x0) [ 654.770925][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:05 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 64) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) syz_open_pts(r4, 0x82200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:05 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x88a8ffff}, 0x0) 17:53:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x149140) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000000021000000080003004b81d4a59cd8298bc2e50c2b5c849e4da6ac365ddc9d5195946592", @ANYRES32=r3, @ANYBLOB="04002d80", @ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="39b243", @ANYRES32=r2], 0x20}}, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x202400, 0x4, 0x11}, 0x18) write(r6, &(0x7f0000000200)="471c4d5ae471e715124630898353326d136aa7ea40d8fafab81184957c7cfd25cc1f07043a651c00cf9126e98cb8430fd2540c03f58dbeae6b2a82115b9f39717078707beec186ccc768d6d2e3ff63e27f7893a0896510de62cf0c7e8e85e88c8ed2017f9992b4edf1134a7913f38fdb2aa52f5db3d9d91f9903b784f1a898fbdba9ffd6fb65ff1e80f37b3dd6d9ccde3eaa7e9d25e4fefe4414a6d43ca3d71b9b866036c46f67b150a71dfb1b792dd07ac5a5839cc7dc0207db63274d7025eac5c66a83ad7fdd37e2b199bc0ee980e3b6551be28942a7e149f18b1699f8b4cb", 0xe0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x149140) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c000000000000000021000000080003004b81d4a59cd8298bc2e50c2b5c849e4da6ac365ddc9d5195946592", @ANYRES32=r3, @ANYBLOB="04002d80", @ANYRES16=r5, @ANYRES64=r0, @ANYBLOB="39b243", @ANYRES32=r2], 0x20}}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x202400, 0x4, 0x11}, 0x18) (async) write(r6, &(0x7f0000000200)="471c4d5ae471e715124630898353326d136aa7ea40d8fafab81184957c7cfd25cc1f07043a651c00cf9126e98cb8430fd2540c03f58dbeae6b2a82115b9f39717078707beec186ccc768d6d2e3ff63e27f7893a0896510de62cf0c7e8e85e88c8ed2017f9992b4edf1134a7913f38fdb2aa52f5db3d9d91f9903b784f1a898fbdba9ffd6fb65ff1e80f37b3dd6d9ccde3eaa7e9d25e4fefe4414a6d43ca3d71b9b866036c46f67b150a71dfb1b792dd07ac5a5839cc7dc0207db63274d7025eac5c66a83ad7fdd37e2b199bc0ee980e3b6551be28942a7e149f18b1699f8b4cb", 0xe0) (async) 17:53:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) 17:53:05 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1f) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) write$rfkill(r5, &(0x7f0000000100)={0x10000, 0x2, 0x2, 0x1}, 0x8) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) [ 655.304074][T24276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x9effffff}, 0x0) [ 655.389735][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:53:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 17:53:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0) 17:53:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001007100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="af512dd0cab7b9d48a997e0fdd76"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96d}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048090}, 0x44) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r13 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r13, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x74, r0, 0x100, 0x7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x1}, {0x2, 0x1}, {0xb}, {0x48, 0x1}, {0x1}, {0x36}, {0x2, 0x1}, {0x48, 0x1}, {0x48}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x1e}, {0x5, 0x1}, {0x1b}, {0xb, 0x1}, {0x4, 0x1}, {0x5}, {0x6c}, {0x24, 0x1}, {0xc, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x39, 0x1}, {0x36, 0x1}, {0xc}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xffffa888}, 0x0) 17:53:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r4 = syz_open_pts(r1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x440000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000140)={0xd36, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:06 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1f) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) write$rfkill(r5, &(0x7f0000000100)={0x10000, 0x2, 0x2, 0x1}, 0x8) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1f) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (async) write$rfkill(r5, &(0x7f0000000100)={0x10000, 0x2, 0x2, 0x1}, 0x8) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xfffff000}, 0x0) 17:53:06 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) 17:53:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001007100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="af512dd0cab7b9d48a997e0fdd76"], 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96d}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048090}, 0x44) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 32) r13 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (rerun: 32) fallocate(r13, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x74, r0, 0x100, 0x7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x1}, {0x2, 0x1}, {0xb}, {0x48, 0x1}, {0x1}, {0x36}, {0x2, 0x1}, {0x48, 0x1}, {0x48}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x1e}, {0x5, 0x1}, {0x1b}, {0xb, 0x1}, {0x4, 0x1}, {0x5}, {0x6c}, {0x24, 0x1}, {0xc, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x39, 0x1}, {0x36, 0x1}, {0xc}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xffffff7f}, 0x0) 17:53:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xffffff9e}, 0x0) [ 656.520577][T24339] warn_alloc: 3 callbacks suppressed [ 656.520595][T24339] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 17:53:07 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 656.618971][T24339] CPU: 0 PID: 24339 Comm: syz-executor.1 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 656.629523][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.639595][T24339] Call Trace: [ 656.642889][T24339] [ 656.645829][T24339] dump_stack_lvl+0xcd/0x134 [ 656.650443][T24339] warn_alloc.cold+0x9b/0x189 [ 656.655134][T24339] ? zone_watermark_ok_safe+0x290/0x290 [ 656.660690][T24339] ? __vmalloc_node_range+0x7bf/0x1060 [ 656.666150][T24339] __vmalloc_node_range+0xe1e/0x1060 [ 656.671445][T24339] ? vfree_atomic+0xe0/0xe0 [ 656.675946][T24339] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 656.681751][T24339] ? __ldsem_down_read_nested+0x850/0x850 [ 656.687471][T24339] ? __wake_up_common+0x650/0x650 [ 656.692492][T24339] ? n_tty_open+0x16/0x170 [ 656.696909][T24339] vzalloc+0x67/0x80 [ 656.700802][T24339] ? n_tty_open+0x16/0x170 [ 656.705216][T24339] n_tty_open+0x16/0x170 [ 656.709461][T24339] ? n_tty_set_termios+0x1010/0x1010 [ 656.714745][T24339] tty_ldisc_open+0x9b/0x110 [ 656.719342][T24339] tty_ldisc_setup+0x43/0x100 [ 656.724998][T24339] tty_init_dev.part.0+0x1f4/0x610 [ 656.730199][T24339] ? pty_unix98_compat_ioctl+0x50/0x50 [ 656.735656][T24339] tty_init_dev+0x5b/0x80 [ 656.739989][T24339] ptmx_open+0x112/0x360 [ 656.744236][T24339] ? pty_unix98_compat_ioctl+0x50/0x50 [ 656.749694][T24339] chrdev_open+0x266/0x770 [ 656.754114][T24339] ? cdev_device_add+0x210/0x210 [ 656.759054][T24339] ? fsnotify_perm.part.0+0x22d/0x620 [ 656.764425][T24339] do_dentry_open+0x4b9/0x1240 [ 656.769190][T24339] ? cdev_device_add+0x210/0x210 [ 656.774125][T24339] ? may_open+0x1f6/0x420 [ 656.778453][T24339] path_openat+0x1c9e/0x2940 [ 656.783046][T24339] ? path_lookupat+0x860/0x860 [ 656.787810][T24339] ? mark_lock+0xef/0x17b0 [ 656.792227][T24339] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 656.798467][T24339] do_filp_open+0x1aa/0x400 [ 656.802988][T24339] ? may_open_dev+0xf0/0xf0 [ 656.807491][T24339] ? rwlock_bug.part.0+0x90/0x90 [ 656.812429][T24339] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 656.818669][T24339] ? _find_next_bit+0x1e3/0x260 [ 656.823515][T24339] ? _raw_spin_unlock+0x24/0x40 [ 656.828363][T24339] ? alloc_fd+0x2f0/0x670 [ 656.832688][T24339] do_sys_openat2+0x16d/0x4d0 [ 656.837369][T24339] ? build_open_flags+0x6f0/0x6f0 [ 656.842388][T24339] ? __context_tracking_exit+0xb8/0xe0 [ 656.847849][T24339] ? lock_downgrade+0x6e0/0x6e0 [ 656.852711][T24339] __x64_sys_openat+0x13f/0x1f0 [ 656.857562][T24339] ? __ia32_sys_open+0x1c0/0x1c0 [ 656.862495][T24339] ? syscall_enter_from_user_mode+0x21/0x70 [ 656.868392][T24339] do_syscall_64+0x35/0xb0 [ 656.872902][T24339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 656.878794][T24339] RIP: 0033:0x7f8029a00059 [ 656.883207][T24339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 656.902810][T24339] RSP: 002b:00007f8028333168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.911219][T24339] RAX: ffffffffffffffda RBX: 00007f8029b13100 RCX: 00007f8029a00059 17:53:07 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000080001007100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="af512dd0cab7b9d48a997e0fdd76"], 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96d}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048090}, 0x44) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 64) r13 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) fallocate(r13, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x74, r0, 0x100, 0x7, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x1}, {0x2, 0x1}, {0xb}, {0x48, 0x1}, {0x1}, {0x36}, {0x2, 0x1}, {0x48, 0x1}, {0x48}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x1e}, {0x5, 0x1}, {0x1b}, {0xb, 0x1}, {0x4, 0x1}, {0x5}, {0x6c}, {0x24, 0x1}, {0xc, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x39, 0x1}, {0x36, 0x1}, {0xc}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:07 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0) 17:53:07 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 656.919184][T24339] RDX: 0000000000000041 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 656.927149][T24339] RBP: 00007f8029a5a08d R08: 0000000000000000 R09: 0000000000000000 [ 656.935113][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.943081][T24339] R13: 00007ffe61e6ba5f R14: 00007f8028333300 R15: 0000000000022000 [ 656.951048][T24339] [ 657.283799][T24339] Mem-Info: [ 657.289000][T24339] active_anon:4534 inactive_anon:153075 isolated_anon:0 [ 657.289000][T24339] active_file:5034 inactive_file:7538 isolated_file:0 [ 657.289000][T24339] unevictable:768 dirty:60 writeback:0 [ 657.289000][T24339] slab_reclaimable:21974 slab_unreclaimable:114760 [ 657.289000][T24339] mapped:27615 shmem:6036 pagetables:888 bounce:0 [ 657.289000][T24339] kernel_misc_reclaimable:0 [ 657.289000][T24339] free:1296241 free_pcp:8726 free_cma:0 [ 657.344504][T24339] Node 0 active_anon:18128kB inactive_anon:609080kB active_file:20060kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110560kB dirty:236kB writeback:0kB shmem:21668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 149504kB writeback_tmp:0kB kernel_stack:10356kB pagetables:3544kB all_unreclaimable? no [ 657.383320][T24339] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 657.415778][T24339] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.445684][T24339] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 657.451483][T24339] Node 0 DMA32 free:1220376kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18128kB inactive_anon:609080kB active_file:20060kB inactive_file:30152kB unevictable:1536kB writepending:236kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:37040kB local_pcp:21608kB free_cma:0kB [ 657.482914][T24339] lowmem_reserve[]: 0 0 0 0 0 [ 657.487763][T24339] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.514667][T24339] lowmem_reserve[]: 0 0 0 0 0 [ 657.519556][T24339] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.558409][T24339] lowmem_reserve[]: 0 0 0 0 0 [ 657.563235][T24339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 657.579835][T24339] Node 0 DMA32: 1520*4kB (UME) 965*8kB (UME) 827*16kB (UME) 518*32kB (UME) 181*64kB (UME) 63*128kB (UME) 22*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 277*4096kB (UM) = 1220376kB [ 657.599399][T24339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.611125][T24339] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 657.629318][T24339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.639450][T24339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 657.649309][T24339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.659067][T24339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 657.669181][T24339] 18611 total pagecache pages [ 657.677072][T24339] 0 pages in swap cache [ 657.681379][T24339] Swap cache stats: add 0, delete 0, find 0/0 [ 657.687601][T24339] Free swap = 0kB [ 657.691328][T24339] Total swap = 0kB 17:53:08 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r4 = syz_open_pts(r1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x440000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000140)={0xd36, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x440000) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000140)={0xd36, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 17:53:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0) 17:53:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (async, rerun: 32) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1f) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 64) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (rerun: 64) write$rfkill(r5, &(0x7f0000000100)={0x10000, 0x2, 0x2, 0x1}, 0x8) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 657.695542][T24339] 2097051 pages RAM [ 657.699502][T24339] 0 pages HighMem/MovableOnly [ 657.704504][T24339] 384533 pages reserved [ 657.708726][T24339] 0 pages cma reserved [ 657.713001][T24339] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x100000000000000}, 0x0) 17:53:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x200000000000000}, 0x0) 17:53:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2a}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x500000000000000}, 0x0) 17:53:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 658.187552][T24407] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:09 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811fdff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r4 = syz_open_pts(r1, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x440000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f00000007c0)=""/4096) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000140)={0xd36, 0x18, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) (async, rerun: 32) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async, rerun: 32) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x300000000000000}, 0x0) 17:53:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x284b091ae7ddfc5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb16e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x3ff, 0x2, 0x3, 0x8000}, {0x9, 0x7, 0x80, 0xa9}, {0xffc0, 0x1, 0x75, 0x1f}, {0x6, 0x3, 0x6, 0x10000}, {0x0, 0x6, 0xf2}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x400, 0x0, @mcast1, @loopback, 0x8000, 0x0, 0x0, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) 17:53:09 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20141, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x600000000000000}, 0x0) 17:53:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x400000000000000}, 0x0) 17:53:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x700000000000000}, 0x0) 17:53:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xc}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x600000000000000}, 0x0) 17:53:09 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x284b091ae7ddfc5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb16e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x3ff, 0x2, 0x3, 0x8000}, {0x9, 0x7, 0x80, 0xa9}, {0xffc0, 0x1, 0x75, 0x1f}, {0x6, 0x3, 0x6, 0x10000}, {0x0, 0x6, 0xf2}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x400, 0x0, @mcast1, @loopback, 0x8000, 0x0, 0x0, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x284b091ae7ddfc5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb16e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x3ff, 0x2, 0x3, 0x8000}, {0x9, 0x7, 0x80, 0xa9}, {0xffc0, 0x1, 0x75, 0x1f}, {0x6, 0x3, 0x6, 0x10000}, {0x0, 0x6, 0xf2}]}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x400, 0x0, @mcast1, @loopback, 0x8000, 0x0, 0x0, 0x9}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) 17:53:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x800000000000000}, 0x0) 17:53:10 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x800000000000000}, 0x0) 17:53:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xa00000000000000}, 0x0) 17:53:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x284b091ae7ddfc5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb16e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x3ff, 0x2, 0x3, 0x8000}, {0x9, 0x7, 0x80, 0xa9}, {0xffc0, 0x1, 0x75, 0x1f}, {0x6, 0x3, 0x6, 0x10000}, {0x0, 0x6, 0xf2}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x400, 0x0, @mcast1, @loopback, 0x8000, 0x0, 0x0, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x31, 0x284b091ae7ddfc5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb16e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x3ff, 0x2, 0x3, 0x8000}, {0x9, 0x7, 0x80, 0xa9}, {0xffc0, 0x1, 0x75, 0x1f}, {0x6, 0x3, 0x6, 0x10000}, {0x0, 0x6, 0xf2}]}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x400, 0x0, @mcast1, @loopback, 0x8000, 0x0, 0x0, 0x9}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @dev}, &(0x7f0000000280)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) 17:53:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20141, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20141, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xc00000000000000}, 0x0) [ 659.807553][T24510] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xe00000000000000}, 0x0) 17:53:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x900000000000000}, 0x0) 17:53:10 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001007100000036071c9e", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0xfffff801, 0x10, @private0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7, 0x4, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x170, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x804) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 17:53:10 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20141, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 660.178280][T24542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.261303][ T26] audit: type=1400 audit(1644688390.910:753): avc: denied { ioctl } for pid=24539 comm="syz-executor.2" path="/dev/btrfs-control" dev="devtmpfs" ino=1115 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 17:53:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 17:53:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001007100000036071c9e", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0xfffff801, 0x10, @private0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7, 0x4, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x170, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x804) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 17:53:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xc00000000000000}, 0x0) 17:53:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x60}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x1000000000000000}, 0x0) 17:53:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000002c0)) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000031000000080001007100000036071c9e", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0xfffff801, 0x10, @private0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7, 0x4, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x170, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 17:53:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xf0}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x310a000000000000}, 0x0) 17:53:11 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf0, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ba}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x68}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x323}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66a}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xb0000000, 0x9a84, 0x5]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xffff, 0x3, 0x8, 0x6ef]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bc}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20090) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe00000000000000}, 0x0) 17:53:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:12 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6000000000000000}, 0x0) 17:53:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf0, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ba}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x68}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x323}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66a}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xb0000000, 0x9a84, 0x5]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xffff, 0x3, 0x8, 0x6ef]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bc}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20090) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf00000000000000}, 0x0) 17:53:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf0, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ba}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x68}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x323}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66a}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xb0000000, 0x9a84, 0x5]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xffff, 0x3, 0x8, 0x6ef]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bc}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20090) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xf0, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ba}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x68}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffff5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x323}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x66a}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xb0000000, 0x9a84, 0x5]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xffff, 0x3, 0x8, 0x6ef]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bc}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20090) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:53:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x6558000000000000}, 0x0) 17:53:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x8100000000000000}, 0x0) 17:53:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x3e7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:12 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xf1f9}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:12 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x1f00000000000000}, 0x0) 17:53:12 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x400, 0x0, 0x56a, 0x6, 0x12, "2b42ff15c5f83720e84f017553f371217b7436"}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x88a8ffff00000000}, 0x0) 17:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xf1f9}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x3f00000000000000}, 0x0) 17:53:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x500}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:13 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xf1f9}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xf1f9}}, './file0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 17:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17:53:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x6000000000000000}, 0x0) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 17:53:13 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x400, 0x0, 0x56a, 0x6, 0x12, "2b42ff15c5f83720e84f017553f371217b7436"}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x400, 0x0, 0x56a, 0x6, 0x12, "2b42ff15c5f83720e84f017553f371217b7436"}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 17:53:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x600}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) 17:53:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x840b000000000000}, 0x0) 17:53:13 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x1f, 0x8, 0x34e, 0x2bb, 0x0, 0xd3, 0x7f}, "55f9b1f8a5ad8f14f49d1827d99ba012ffc36190278b0c06", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 17:53:13 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 663.273460][ T26] audit: type=1400 audit(1644688393.920:754): avc: denied { write } for pid=24715 comm="syz-executor.1" name="loop-control" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 17:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 17:53:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x88000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffd, 0x7b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x4040085) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x700}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9605000000000000}, 0x0) 17:53:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x400, 0x0, 0x56a, 0x6, 0x12, "2b42ff15c5f83720e84f017553f371217b7436"}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 17:53:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x88000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffd, 0x7b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x4040085) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 17:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x8}, 0x0) 17:53:14 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x1f, 0x8, 0x34e, 0x2bb, 0x0, 0xd3, 0x7f}, "55f9b1f8a5ad8f14f49d1827d99ba012ffc36190278b0c06", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x1f, 0x8, 0x34e, 0x2bb, 0x0, 0xd3, 0x7f}, "55f9b1f8a5ad8f14f49d1827d99ba012ffc36190278b0c06", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x88000) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x60, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffd, 0x7b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x4040085) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0) 17:53:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x900}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xa}, 0x0) 17:53:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xc}, 0x0) 17:53:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) [ 664.492364][T24799] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xe703000000000000}, 0x0) 17:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xe}, 0x0) 17:53:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:15 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x1f, 0x8, 0x34e, 0x2bb, 0x0, 0xd3, 0x7f}, "55f9b1f8a5ad8f14f49d1827d99ba012ffc36190278b0c06", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) write$binfmt_aout(r0, &(0x7f0000000400)={{0x107, 0x1f, 0x8, 0x34e, 0x2bb, 0x0, 0xd3, 0x7f}, "55f9b1f8a5ad8f14f49d1827d99ba012ffc36190278b0c06", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000}) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xae8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf}, 0x0) 17:53:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:15 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0) 17:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x10}, 0x0) 17:53:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) (async, rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async, rerun: 32) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:15 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r0, 0xc01, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xad, 0x29}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 17:53:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x60}, 0x0) 17:53:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xb84}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r0, 0xc01, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xad, 0x29}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r0, 0xc01, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xad, 0x29}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) (async) 17:53:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfcffffff00000000}, 0x0) 17:53:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1a, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf0}, 0x0) 17:53:16 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r0, 0xc01, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xad, 0x29}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x2c}}, 0x0) 17:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 17:53:16 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{}, 0x0, 0x1e, @unused=[0xffffffff, 0x8, 0x8000, 0x6], @devid}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008880}, 0x10) 17:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x600}, 0x0) [ 665.827316][ T26] audit: type=1400 audit(1644688396.480:755): avc: denied { ioctl } for pid=24891 comm="syz-executor.2" path="socket:[94050]" dev="sockfs" ino=94050 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 17:53:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xc00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xff00000000000000}, 0x0) 17:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xa00}, 0x0) 17:53:16 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{}, 0x0, 0x1e, @unused=[0xffffffff, 0x8, 0x8000, 0x6], @devid}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async, rerun: 64) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008880}, 0x10) 17:53:16 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xa31}, 0x0) 17:53:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1a, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:17 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{}, 0x0, 0x1e, @unused=[0xffffffff, 0x8, 0x8000, 0x6], @devid}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async, rerun: 32) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008880}, 0x10) 17:53:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xc00}, 0x0) 17:53:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xe00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) 17:53:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xe00}, 0x0) 17:53:17 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x3bb4, 0x241) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x40000000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:17 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) 17:53:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000004000180040003001c0002800c00018008000100010000000cc178a4ea0f0f5eb1a7680000000000"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x20, 0x3, 0x32}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2b4, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:17 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xf00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:17 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0) 17:53:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000004000180040003001c0002800c00018008000100010000000cc178a4ea0f0f5eb1a7680000000000"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x20, 0x3, 0x32}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2b4, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000004000180040003001c0002800c00018008000100010000000cc178a4ea0f0f5eb1a7680000000000"], 0x38}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x20, 0x3, 0x32}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2b4, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:53:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0xfffffffffffff000}, 0x0) 17:53:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1a, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x310a}, 0x0) 17:53:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x1f00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000004000180040003001c0002800c00018008000100010000000cc178a4ea0f0f5eb1a7680000000000"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x20, 0x3, 0x32}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x2b4, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x5865}, 0x0) 17:53:18 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) syz_open_pts(r1, 0x0) (async, rerun: 32) r2 = epoll_create1(0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x3bb4, 0x241) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x40000000}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) flock(r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6000}, 0x0) 17:53:18 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) 17:53:18 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x3f00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6558}, 0x0) 17:53:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) flock(r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) (async) flock(r2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:53:19 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) 17:53:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x8100}, 0x0) 17:53:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) flock(r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000007c0)=""/4096) (async) flock(r2, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) 17:53:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x6000}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000007c0)=""/4096) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x3bb4, 0x241) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f00000007c0)=""/4096) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x40000000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 17:53:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) 17:53:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20048811) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x801, 0x1, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x8000) 17:53:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) 17:53:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) 17:53:19 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0x840b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 17:53:20 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x4}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20048811) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x801, 0x1, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20048811) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x801, 0x1, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x8000) (async) 17:53:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 17:53:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xe703}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:20 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0) 17:53:20 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 17:53:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20048811) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x801, 0x1, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x8000) 17:53:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) [ 669.824138][T25092] warn_alloc: 4 callbacks suppressed 17:53:20 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xe80a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 669.824155][T25092] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 17:53:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r9, 0x7f}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r9, 0x82257093, 0xc4c0}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:53:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) [ 670.059097][ T26] audit: type=1400 audit(1644688400.710:756): avc: denied { accept } for pid=25119 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 670.061326][T25092] CPU: 0 PID: 25092 Comm: syz-executor.1 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 670.090390][T25092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.100460][T25092] Call Trace: [ 670.103750][T25092] [ 670.106689][T25092] dump_stack_lvl+0xcd/0x134 [ 670.111307][T25092] warn_alloc.cold+0x9b/0x189 [ 670.116008][T25092] ? zone_watermark_ok_safe+0x290/0x290 [ 670.121577][T25092] ? __vmalloc_node_range+0x7bf/0x1060 [ 670.127058][T25092] __vmalloc_node_range+0xe1e/0x1060 [ 670.132361][T25092] ? vfree_atomic+0xe0/0xe0 [ 670.136888][T25092] ? rcu_read_lock_sched_held+0x3a/0x70 [ 670.142450][T25092] ? kmem_cache_alloc_node+0x3ce/0x590 [ 670.147926][T25092] ? kernel_clone+0xe7/0xab0 [ 670.152521][T25092] copy_process+0x926/0x7300 [ 670.157118][T25092] ? kernel_clone+0xe7/0xab0 [ 670.161729][T25092] ? lock_chain_count+0x20/0x20 [ 670.166586][T25092] ? lock_chain_count+0x20/0x20 [ 670.171439][T25092] ? find_held_lock+0x2d/0x110 [ 670.176209][T25092] ? __cleanup_sighand+0xb0/0xb0 [ 670.181141][T25092] ? lock_downgrade+0x6e0/0x6e0 [ 670.186008][T25092] ? __lock_acquire+0x1655/0x5470 [ 670.191031][T25092] ? kernel_clone+0x314/0xab0 [ 670.195704][T25092] kernel_clone+0xe7/0xab0 [ 670.200117][T25092] ? create_io_thread+0xf0/0xf0 [ 670.204963][T25092] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 670.210939][T25092] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 670.216921][T25092] ? find_held_lock+0x2d/0x110 [ 670.221677][T25092] __do_sys_clone+0xc8/0x110 [ 670.226262][T25092] ? kernel_clone+0xab0/0xab0 [ 670.230929][T25092] ? lock_downgrade+0x6e0/0x6e0 [ 670.235877][T25092] ? syscall_enter_from_user_mode+0x21/0x70 [ 670.241787][T25092] do_syscall_64+0x35/0xb0 [ 670.246222][T25092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 670.252131][T25092] RIP: 0033:0x7f8029a01481 [ 670.256548][T25092] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 670.276156][T25092] RSP: 002b:00007ffe61e6b9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 670.284579][T25092] RAX: ffffffffffffffda RBX: 00007f80281e9700 RCX: 00007f8029a01481 [ 670.292555][T25092] RDX: 00007f80281e99d0 RSI: 00007f80281e92f0 RDI: 00000000003d0f00 [ 670.300538][T25092] RBP: 00007ffe61e6bbf0 R08: 00007f80281e9700 R09: 00007f80281e9700 [ 670.308516][T25092] R10: 00007f80281e99d0 R11: 0000000000000206 R12: 00007ffe61e6ba5e [ 670.316494][T25092] R13: 00007ffe61e6ba5f R14: 00007f80281e9300 R15: 0000000000022000 [ 670.324467][T25092] [ 670.340388][ T26] audit: type=1800 audit(1644688400.990:757): pid=25120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1156 res=0 errno=0 [ 670.467594][T25092] Mem-Info: [ 670.470925][T25092] active_anon:4537 inactive_anon:153081 isolated_anon:0 [ 670.470925][T25092] active_file:5092 inactive_file:7538 isolated_file:0 [ 670.470925][T25092] unevictable:768 dirty:73 writeback:0 [ 670.470925][T25092] slab_reclaimable:21960 slab_unreclaimable:115040 [ 670.470925][T25092] mapped:27610 shmem:6040 pagetables:881 bounce:0 [ 670.470925][T25092] kernel_misc_reclaimable:0 [ 670.470925][T25092] free:1296618 free_pcp:8044 free_cma:0 [ 670.515035][T25092] Node 0 active_anon:18140kB inactive_anon:611292kB active_file:20292kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110440kB dirty:288kB writeback:0kB shmem:21684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 151552kB writeback_tmp:0kB kernel_stack:10480kB pagetables:3516kB all_unreclaimable? no [ 670.551054][T25092] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 670.594618][T25092] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.657730][T25092] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 670.664014][T25092] Node 0 DMA32 free:1221884kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18144kB inactive_anon:609020kB active_file:20304kB inactive_file:30152kB unevictable:1536kB writepending:304kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:34756kB local_pcp:18000kB free_cma:0kB [ 670.697661][T25092] lowmem_reserve[]: 0 0 0 0 0 [ 670.702506][T25092] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.736111][T25092] lowmem_reserve[]: 0 0 0 0 0 [ 670.740966][T25092] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.772790][T25092] lowmem_reserve[]: 0 0 0 0 0 [ 670.779841][T25092] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 670.793302][T25092] Node 0 DMA32: 1287*4kB (UME) 874*8kB (UME) 903*16kB (UME) 513*32kB (UME) 182*64kB (UME) 63*128kB (UME) 22*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 278*4096kB (UM) = 1221884kB [ 670.812621][T25092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 670.824548][T25092] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 670.842521][T25092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.852448][T25092] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 670.861843][T25092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.871523][T25092] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 670.882893][T25092] 18674 total pagecache pages [ 670.887816][T25092] 0 pages in swap cache [ 670.891961][T25092] Swap cache stats: add 0, delete 0, find 0/0 [ 670.898100][T25092] Free swap = 0kB [ 670.901810][T25092] Total swap = 0kB 17:53:21 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x4}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0) 17:53:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) (async) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) (async) sendfile(r6, r7, 0x0, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r9, 0x7f}, &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r9, 0x82257093, 0xc4c0}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:53:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) 17:53:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xf000}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) [ 670.905701][T25092] 2097051 pages RAM [ 670.909504][T25092] 0 pages HighMem/MovableOnly [ 670.915421][T25092] 384533 pages reserved [ 670.919579][T25092] 0 pages cma reserved 17:53:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xa000000}, 0x0) 17:53:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) (async) r7 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r9, 0x7f}, &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r9, 0x82257093, 0xc4c0}, 0xc) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 671.010472][ T26] audit: type=1800 audit(1644688401.650:758): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1181 res=0 errno=0 17:53:21 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (rerun: 64) r2 = syz_open_pts(r1, 0x0) (async, rerun: 64) r3 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xc000000}, 0x0) [ 671.188085][ T26] audit: type=1800 audit(1644688401.840:759): pid=25167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1157 res=0 errno=0 [ 671.244994][T25157] ptm ptm0: ldisc open failed (-12), clearing slot 0 17:53:21 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x7}, 0x0) 17:53:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:22 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0xc0010) 17:53:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xff00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xe000000}, 0x0) 17:53:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (rerun: 32) 17:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) 17:53:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x8}, 0x0) 17:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x10000000}, 0x0) 17:53:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:22 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x8, 0x6, 0x6, 0x8, 0x2, "04c10f8ac7ba06d3ddaab297d35e8721c1a823"}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:22 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{0x21, 0x0, 0xffff}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x310a0000}, 0x0) 17:53:22 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0) 17:53:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0xc0010) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0xc0010) (async) 17:53:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = accept4$x25(r4, 0x0, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000040)='1', 0x1) 17:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x60000000}, 0x0) 17:53:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x3, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xc}, 0x0) 17:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x65580000}, 0x0) [ 672.662013][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x81000000}, 0x0) 17:53:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) r5 = accept4$x25(r4, 0x0, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000040)='1', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) accept4$x25(r4, 0x0, &(0x7f0000000000), 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000040)='1', 0x1) (async) [ 672.895269][T25251] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x8, 0x6, 0x6, 0x8, 0x2, "04c10f8ac7ba06d3ddaab297d35e8721c1a823"}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x8, 0x6, 0x6, 0x8, 0x2, "04c10f8ac7ba06d3ddaab297d35e8721c1a823"}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xe}, 0x0) 17:53:23 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x5, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x88a8ffff}, 0x0) 17:53:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) r5 = accept4$x25(r4, 0x0, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async) write$6lowpan_enable(r5, &(0x7f0000000040)='1', 0x1) 17:53:23 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0xc0010) 17:53:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) [ 673.251763][T25284] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 17:53:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 17:53:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xf}, 0x0) [ 673.428460][T25300] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xe, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xffffa888}, 0x0) [ 673.764613][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x8, 0x6, 0x6, 0x8, 0x2, "04c10f8ac7ba06d3ddaab297d35e8721c1a823"}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) 17:53:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x60}, 0x0) 17:53:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x21, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 674.091732][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 17:53:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 17:53:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xf0}, 0x0) 17:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) 17:53:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x26, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002dbd7000fcdbdf25210000000c0099000300000005000000"], 0x20}}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) [ 674.563153][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x16) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x16, 0x2001d, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xe, "00e4d3f2b5e8e158ffff00"}) r4 = syz_clone(0x40000000, &(0x7f00000007c0)="53a59518d36083f1fa4b94cd23f74f8ed483707e6363fa474db49f3eab169b84f4d910ab22c7608822f0a03a23c50a3123", 0x31, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="2192347af854e110fe98b737d330381676f3390038774ab2148d3eb4e5e562424890f9ea5783258ba444f10effc33ca47a65065e6d8db3b4f2f09e6162ae69a75d8b7203455d4eded8046b4c042f95c5648f42fc8b8ab8089645ed0c0827106421c2378f5b3b634250725887056cafc2d9b3d4df628c5d4ed4991a59f5b2") getresuid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) r6 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="354f28bf2d9b2b780054deec72a104a84a43ffd84255b2341effe7fb1be1491d9c7048d1cef1730cc52472a184166b260ef0b3178d530c7e0d271ed62a580624e3cb8ac7ddd21677ea8ba853abba09873b6dfdd6dfc8cba749c450c5ca993b7fa1b1bb90213ee11b4cc5a1b571cf47dd58d7607fd1f76329b4338e40bdbd4f0d198bf43e1059dd0cbed6f0b199286fd44b1958da1216705c8dec169150b50078b6ef64a008879d67565a94f49b8b77731ba90de070a8bd67bb374060413d031a44b28029667948c205f1db1223719ad2eb52542cb783df4907", 0xd9}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0xc0, 0x4000044}, 0x4004) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000280)={'trans=unix,', {[{@access_any}, {@access_user}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}, {@dfltgid}, {@cachetag={'cachetag', 0x3d, '-#-'}}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_appraise}, {@smackfshat}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) r7 = syz_open_pts(r1, 0x0) r8 = epoll_create1(0x0) ioctl$TCXONC(r1, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 17:53:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002dbd7000fcdbdf25210000000c0099000300000005000000"], 0x20}}, 0x24008000) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) 17:53:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x28, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 674.972578][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002dbd7000fcdbdf25210000000c0099000300000005000000"], 0x20}}, 0x24008000) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 17:53:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x3e7}, 0x0) 17:53:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x33, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 675.334558][T25403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) listen(r1, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x10000) [ 675.606052][ T26] audit: type=1400 audit(1644688406.260:760): avc: denied { listen } for pid=25415 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 17:53:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0) 17:53:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 17:53:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x3b, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:26 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x16) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x16, 0x2001d, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xe, "00e4d3f2b5e8e158ffff00"}) r4 = syz_clone(0x40000000, &(0x7f00000007c0)="53a59518d36083f1fa4b94cd23f74f8ed483707e6363fa474db49f3eab169b84f4d910ab22c7608822f0a03a23c50a3123", 0x31, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="2192347af854e110fe98b737d330381676f3390038774ab2148d3eb4e5e562424890f9ea5783258ba444f10effc33ca47a65065e6d8db3b4f2f09e6162ae69a75d8b7203455d4eded8046b4c042f95c5648f42fc8b8ab8089645ed0c0827106421c2378f5b3b634250725887056cafc2d9b3d4df628c5d4ed4991a59f5b2") (async) getresuid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) (async) r6 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="354f28bf2d9b2b780054deec72a104a84a43ffd84255b2341effe7fb1be1491d9c7048d1cef1730cc52472a184166b260ef0b3178d530c7e0d271ed62a580624e3cb8ac7ddd21677ea8ba853abba09873b6dfdd6dfc8cba749c450c5ca993b7fa1b1bb90213ee11b4cc5a1b571cf47dd58d7607fd1f76329b4338e40bdbd4f0d198bf43e1059dd0cbed6f0b199286fd44b1958da1216705c8dec169150b50078b6ef64a008879d67565a94f49b8b77731ba90de070a8bd67bb374060413d031a44b28029667948c205f1db1223719ad2eb52542cb783df4907", 0xd9}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0xc0, 0x4000044}, 0x4004) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000280)={'trans=unix,', {[{@access_any}, {@access_user}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}, {@dfltgid}, {@cachetag={'cachetag', 0x3d, '-#-'}}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_appraise}, {@smackfshat}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) r7 = syz_open_pts(r1, 0x0) (async) r8 = epoll_create1(0x0) ioctl$TCXONC(r1, 0x540a, 0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) listen(r1, 0x8) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x10000) [ 675.893864][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 17:53:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 17:53:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) listen(r1, 0x8) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x10000) 17:53:26 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x596}, 0x0) 17:53:26 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x6b, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 676.271803][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000002c0)=@newchain={0x8d4, 0x64, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x89c, 0x2, [@TCA_RSVP_POLICE={0x888, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x28, 0x6, 0xfffffffe, 0xf950, 0x7, {0x4, 0x1, 0x4, 0x5, 0x933e, 0x1f}, {0xff, 0x2, 0x6, 0x6d, 0x2}, 0x7, 0x0, 0x1ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfc000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x7, 0x9, 0x2, 0x33, 0x8, 0x100, 0x80000000, 0x6, 0x0, 0x80, 0x1, 0xf8, 0xff, 0x1f, 0x294, 0x6, 0x6, 0x8, 0xffffffff, 0x100, 0x80000001, 0xab6, 0x800, 0x5, 0x5, 0x0, 0x388, 0xffffffff, 0x4, 0x8000, 0x4, 0x4, 0x6, 0x2, 0x37b3, 0xff, 0x0, 0x80000000, 0x3ff, 0x80000001, 0x1ff, 0x800, 0x4, 0xd47, 0xfffffff9, 0x4, 0x400, 0x7, 0xfffffff9, 0x9, 0x400, 0x8001, 0x4, 0x6, 0x80000001, 0x7f, 0x7, 0x400, 0x4, 0x6, 0x2, 0x1, 0x4, 0x3, 0x7f, 0x1e, 0x80, 0x80000001, 0x1ff, 0x4, 0x8, 0x2, 0xb27, 0x3, 0x9, 0x0, 0x4, 0xfffffffd, 0x477e, 0x7fffffff, 0xffff, 0x4, 0x7, 0x10001, 0x4, 0x1ff, 0x7, 0x81, 0x1, 0x3f2, 0x5be74ab8, 0x9, 0x6, 0x1708f19f, 0x81, 0x9, 0x5, 0x3, 0x4, 0x3efd, 0x1, 0x4, 0x5, 0xfd45, 0x8, 0x2, 0x4, 0x8ac, 0x3a02, 0x8, 0x7, 0x279, 0x50500, 0x7, 0x7, 0xb9, 0x3b, 0x0, 0x1e, 0x2, 0x5, 0x1000, 0x4, 0x400, 0x9, 0x8, 0x3, 0x4777, 0xffffffff, 0x4, 0x7, 0x80000000, 0x101, 0x8000, 0x7bb, 0x8, 0x40, 0xb4b, 0x400, 0x5, 0x1, 0x0, 0x80, 0x80000001, 0x80000000, 0xd92b, 0x0, 0x3f, 0xe81, 0x7455ddd1, 0xa00000, 0x0, 0x6, 0xc1, 0x0, 0x5, 0x3ff, 0x286, 0xfffff49a, 0x3, 0x7, 0x5, 0x1, 0x7fff, 0x200, 0x7bde7230, 0x2, 0xfffffffe, 0x7fff, 0x3, 0x6, 0x3, 0xfffffffe, 0x4, 0x8, 0xfffffffc, 0x2, 0x3864, 0x7ff, 0x3, 0x8, 0xe509, 0xffffff81, 0x4, 0x3, 0x8, 0x0, 0x7, 0x7, 0x400, 0x70, 0xe, 0x3, 0x3d4, 0x5, 0xa90, 0x9, 0x0, 0x80000001, 0x1, 0x5, 0x9, 0x800, 0x5, 0x80, 0x1, 0xffffff01, 0x3, 0x200, 0xf141, 0x9, 0x5, 0x7, 0xfffff800, 0x7, 0x3, 0x4316, 0x1, 0xfffffff7, 0x0, 0x5, 0x6, 0x2, 0x5, 0x7, 0x4dec, 0x1800000, 0x5, 0x7, 0x6, 0x1ff, 0x8, 0x3f, 0xfffffe88, 0x2, 0x3, 0x0, 0x1, 0x4, 0x1, 0x0, 0x2, 0x4fe6, 0x10001, 0xfffffffb, 0x8, 0x2, 0x8000, 0x9, 0x9, 0x8, 0x9, 0xfff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x3, 0x4, 0x5, 0x2, 0xff, 0x1ff, 0x40, 0x3f, 0x1ff, 0xfff, 0x8, 0x7, 0x1, 0x3ff, 0x2, 0xfffff801, 0x8000, 0x3f, 0x1, 0xffffffc0, 0x4, 0x4, 0xa5138000, 0x8, 0xff, 0x2, 0xa209, 0x9, 0x4, 0x520, 0x8, 0x2, 0x2, 0x5f1a4afe, 0xa1, 0x100, 0x9, 0x401, 0x7, 0x9, 0x4, 0x9, 0x9, 0x4, 0x8001, 0xff, 0x8a2, 0xafc7, 0x3, 0x4a, 0x1000, 0x8, 0x6, 0x4, 0x4, 0xfffffc00, 0x3, 0x8001, 0xfd, 0x7fff, 0x6e, 0xfff, 0x1f, 0x200, 0x80000000, 0x8, 0xed85, 0x7, 0x2, 0x40, 0x5, 0xff, 0x850, 0x8, 0x200, 0x7, 0xffffd422, 0xc5b, 0x81, 0x11e8, 0x80000001, 0x80, 0x8, 0x0, 0x2, 0x4, 0x2, 0xfffff1ab, 0x2, 0x9fc, 0x3, 0x0, 0x200, 0xffffffff, 0x5, 0x20, 0x1f, 0x4, 0xe91, 0x1ff, 0x0, 0x6, 0x3ff, 0x81, 0x0, 0x2814, 0x6, 0x3, 0xffffffff, 0x1, 0x1, 0xff, 0xeb, 0x1, 0x7ff, 0x8, 0x40000000, 0x0, 0x4f, 0x9, 0x9, 0x8, 0x2, 0x7, 0xfff, 0x1f, 0x1, 0x5, 0x3, 0x9, 0x5, 0x7ff, 0x6, 0x4, 0x4, 0xe42fc71, 0x6, 0x1ff, 0x731, 0x2, 0x5, 0x6, 0x8000, 0x8, 0x8, 0x3, 0x20, 0x621, 0x4, 0x4, 0x81, 0x6, 0x7, 0x6, 0x800, 0x3, 0x9, 0x0, 0x3, 0x3, 0x8, 0x401, 0x2, 0xff, 0x3, 0x3, 0x80000001, 0x8f, 0x0, 0x0, 0x3f, 0x7fff, 0x67, 0x0, 0x10000, 0xffffffff, 0x7ff, 0x81, 0x2fed, 0x4, 0xf38d, 0x7f, 0x1, 0x1f, 0x3f, 0xc0, 0x60, 0x6, 0x6, 0x9, 0x74, 0x80, 0x4, 0x7, 0xffffff7f, 0x1f, 0x6, 0x7, 0x8, 0x7fffffff, 0x200, 0x8, 0x7ff, 0x401, 0x0, 0x81, 0xffff8001, 0x7, 0x9, 0xfffffffd, 0x7, 0x88, 0x8, 0x9, 0x8, 0x2, 0x401, 0x22f, 0xf540, 0x4, 0x7fff, 0xffffb677, 0x80000000, 0x1, 0x293, 0x2, 0x3, 0x5, 0x1f, 0x8, 0x2, 0x671, 0x2, 0x20, 0x80000001, 0x6, 0xfffffffa, 0x7fffffff, 0x3, 0x5, 0x5, 0x4, 0x9, 0x7f, 0xffff, 0x0, 0x7fff, 0xb158, 0x5, 0x4, 0x7f, 0x0, 0x0, 0x2573, 0x5e2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x21e}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x4048000}, 0x24044000) unshare(0x4c060400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) unshare(0x10000000) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x44000) [ 676.533255][ T991] INFO: trying to register non-static key. [ 676.539092][ T991] The code is fine but needs lockdep annotation, or maybe [ 676.546194][ T991] you didn't initialize this object before use? [ 676.552424][ T991] turning off the locking correctness validator. [ 676.558749][ T991] CPU: 0 PID: 991 Comm: kworker/u4:5 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 676.568907][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.578969][ T991] Workqueue: events_unbound flush_to_ldisc [ 676.584788][ T991] Call Trace: [ 676.588079][ T991] [ 676.591016][ T991] dump_stack_lvl+0xcd/0x134 [ 676.595620][ T991] register_lock_class+0xd28/0x1030 [ 676.596307][T25467] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 676.600827][ T991] ? __lock_acquire+0x1655/0x5470 [ 676.600854][ T991] ? is_dynamic_key+0x1a0/0x1a0 [ 676.617342][ T991] __lock_acquire+0x106/0x5470 [ 676.622111][ T991] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 676.628096][ T991] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 676.634076][ T991] lock_acquire+0x1ab/0x510 [ 676.638572][ T991] ? tty_ldisc_receive_buf+0x14d/0x190 [ 676.644030][ T991] ? lock_release+0x720/0x720 [ 676.648706][ T991] hci_uart_tty_receive+0xc2/0x710 [ 676.654028][ T991] ? tty_ldisc_receive_buf+0x14d/0x190 [ 676.659503][ T991] ? hci_uart_send_frame+0x6b0/0x6b0 [ 676.664788][ T991] tty_ldisc_receive_buf+0x14d/0x190 [ 676.670160][ T991] tty_port_default_receive_buf+0x6e/0xa0 [ 676.675879][ T991] flush_to_ldisc+0x20d/0x3f0 17:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) 17:53:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd60, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 676.680554][ T991] process_one_work+0x9ac/0x1650 [ 676.685553][ T991] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 676.690918][ T991] ? rwlock_bug.part.0+0x90/0x90 [ 676.695864][ T991] ? _raw_spin_lock_irq+0x41/0x50 [ 676.700885][ T991] worker_thread+0x657/0x1110 [ 676.705558][ T991] ? process_one_work+0x1650/0x1650 [ 676.710746][ T991] kthread+0x2e9/0x3a0 [ 676.714962][ T991] ? kthread_complete_and_exit+0x40/0x40 [ 676.720591][ T991] ret_from_fork+0x1f/0x30 [ 676.725027][ T991] 17:53:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x16) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x16, 0x2001d, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xe, "00e4d3f2b5e8e158ffff00"}) (async) r4 = syz_clone(0x40000000, &(0x7f00000007c0)="53a59518d36083f1fa4b94cd23f74f8ed483707e6363fa474db49f3eab169b84f4d910ab22c7608822f0a03a23c50a3123", 0x31, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="2192347af854e110fe98b737d330381676f3390038774ab2148d3eb4e5e562424890f9ea5783258ba444f10effc33ca47a65065e6d8db3b4f2f09e6162ae69a75d8b7203455d4eded8046b4c042f95c5648f42fc8b8ab8089645ed0c0827106421c2378f5b3b634250725887056cafc2d9b3d4df628c5d4ed4991a59f5b2") (async) getresuid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) (async) r6 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="354f28bf2d9b2b780054deec72a104a84a43ffd84255b2341effe7fb1be1491d9c7048d1cef1730cc52472a184166b260ef0b3178d530c7e0d271ed62a580624e3cb8ac7ddd21677ea8ba853abba09873b6dfdd6dfc8cba749c450c5ca993b7fa1b1bb90213ee11b4cc5a1b571cf47dd58d7607fd1f76329b4338e40bdbd4f0d198bf43e1059dd0cbed6f0b199286fd44b1958da1216705c8dec169150b50078b6ef64a008879d67565a94f49b8b77731ba90de070a8bd67bb374060413d031a44b28029667948c205f1db1223719ad2eb52542cb783df4907", 0xd9}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0xc0, 0x4000044}, 0x4004) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000280)={'trans=unix,', {[{@access_any}, {@access_user}, {@aname={'aname', 0x3d, '/dev/ptmx\x00'}}, {@dfltgid}, {@cachetag={'cachetag', 0x3d, '-#-'}}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_appraise}, {@smackfshat}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) (async) r7 = syz_open_pts(r1, 0x0) (async) r8 = epoll_create1(0x0) ioctl$TCXONC(r1, 0x540a, 0x3) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 17:53:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0) 17:53:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd68, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 676.867379][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:27 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x700}, 0x0) 17:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) 17:53:27 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000002c0)=@newchain={0x8d4, 0x64, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x89c, 0x2, [@TCA_RSVP_POLICE={0x888, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x28, 0x6, 0xfffffffe, 0xf950, 0x7, {0x4, 0x1, 0x4, 0x5, 0x933e, 0x1f}, {0xff, 0x2, 0x6, 0x6d, 0x2}, 0x7, 0x0, 0x1ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfc000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x7, 0x9, 0x2, 0x33, 0x8, 0x100, 0x80000000, 0x6, 0x0, 0x80, 0x1, 0xf8, 0xff, 0x1f, 0x294, 0x6, 0x6, 0x8, 0xffffffff, 0x100, 0x80000001, 0xab6, 0x800, 0x5, 0x5, 0x0, 0x388, 0xffffffff, 0x4, 0x8000, 0x4, 0x4, 0x6, 0x2, 0x37b3, 0xff, 0x0, 0x80000000, 0x3ff, 0x80000001, 0x1ff, 0x800, 0x4, 0xd47, 0xfffffff9, 0x4, 0x400, 0x7, 0xfffffff9, 0x9, 0x400, 0x8001, 0x4, 0x6, 0x80000001, 0x7f, 0x7, 0x400, 0x4, 0x6, 0x2, 0x1, 0x4, 0x3, 0x7f, 0x1e, 0x80, 0x80000001, 0x1ff, 0x4, 0x8, 0x2, 0xb27, 0x3, 0x9, 0x0, 0x4, 0xfffffffd, 0x477e, 0x7fffffff, 0xffff, 0x4, 0x7, 0x10001, 0x4, 0x1ff, 0x7, 0x81, 0x1, 0x3f2, 0x5be74ab8, 0x9, 0x6, 0x1708f19f, 0x81, 0x9, 0x5, 0x3, 0x4, 0x3efd, 0x1, 0x4, 0x5, 0xfd45, 0x8, 0x2, 0x4, 0x8ac, 0x3a02, 0x8, 0x7, 0x279, 0x50500, 0x7, 0x7, 0xb9, 0x3b, 0x0, 0x1e, 0x2, 0x5, 0x1000, 0x4, 0x400, 0x9, 0x8, 0x3, 0x4777, 0xffffffff, 0x4, 0x7, 0x80000000, 0x101, 0x8000, 0x7bb, 0x8, 0x40, 0xb4b, 0x400, 0x5, 0x1, 0x0, 0x80, 0x80000001, 0x80000000, 0xd92b, 0x0, 0x3f, 0xe81, 0x7455ddd1, 0xa00000, 0x0, 0x6, 0xc1, 0x0, 0x5, 0x3ff, 0x286, 0xfffff49a, 0x3, 0x7, 0x5, 0x1, 0x7fff, 0x200, 0x7bde7230, 0x2, 0xfffffffe, 0x7fff, 0x3, 0x6, 0x3, 0xfffffffe, 0x4, 0x8, 0xfffffffc, 0x2, 0x3864, 0x7ff, 0x3, 0x8, 0xe509, 0xffffff81, 0x4, 0x3, 0x8, 0x0, 0x7, 0x7, 0x400, 0x70, 0xe, 0x3, 0x3d4, 0x5, 0xa90, 0x9, 0x0, 0x80000001, 0x1, 0x5, 0x9, 0x800, 0x5, 0x80, 0x1, 0xffffff01, 0x3, 0x200, 0xf141, 0x9, 0x5, 0x7, 0xfffff800, 0x7, 0x3, 0x4316, 0x1, 0xfffffff7, 0x0, 0x5, 0x6, 0x2, 0x5, 0x7, 0x4dec, 0x1800000, 0x5, 0x7, 0x6, 0x1ff, 0x8, 0x3f, 0xfffffe88, 0x2, 0x3, 0x0, 0x1, 0x4, 0x1, 0x0, 0x2, 0x4fe6, 0x10001, 0xfffffffb, 0x8, 0x2, 0x8000, 0x9, 0x9, 0x8, 0x9, 0xfff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x3, 0x4, 0x5, 0x2, 0xff, 0x1ff, 0x40, 0x3f, 0x1ff, 0xfff, 0x8, 0x7, 0x1, 0x3ff, 0x2, 0xfffff801, 0x8000, 0x3f, 0x1, 0xffffffc0, 0x4, 0x4, 0xa5138000, 0x8, 0xff, 0x2, 0xa209, 0x9, 0x4, 0x520, 0x8, 0x2, 0x2, 0x5f1a4afe, 0xa1, 0x100, 0x9, 0x401, 0x7, 0x9, 0x4, 0x9, 0x9, 0x4, 0x8001, 0xff, 0x8a2, 0xafc7, 0x3, 0x4a, 0x1000, 0x8, 0x6, 0x4, 0x4, 0xfffffc00, 0x3, 0x8001, 0xfd, 0x7fff, 0x6e, 0xfff, 0x1f, 0x200, 0x80000000, 0x8, 0xed85, 0x7, 0x2, 0x40, 0x5, 0xff, 0x850, 0x8, 0x200, 0x7, 0xffffd422, 0xc5b, 0x81, 0x11e8, 0x80000001, 0x80, 0x8, 0x0, 0x2, 0x4, 0x2, 0xfffff1ab, 0x2, 0x9fc, 0x3, 0x0, 0x200, 0xffffffff, 0x5, 0x20, 0x1f, 0x4, 0xe91, 0x1ff, 0x0, 0x6, 0x3ff, 0x81, 0x0, 0x2814, 0x6, 0x3, 0xffffffff, 0x1, 0x1, 0xff, 0xeb, 0x1, 0x7ff, 0x8, 0x40000000, 0x0, 0x4f, 0x9, 0x9, 0x8, 0x2, 0x7, 0xfff, 0x1f, 0x1, 0x5, 0x3, 0x9, 0x5, 0x7ff, 0x6, 0x4, 0x4, 0xe42fc71, 0x6, 0x1ff, 0x731, 0x2, 0x5, 0x6, 0x8000, 0x8, 0x8, 0x3, 0x20, 0x621, 0x4, 0x4, 0x81, 0x6, 0x7, 0x6, 0x800, 0x3, 0x9, 0x0, 0x3, 0x3, 0x8, 0x401, 0x2, 0xff, 0x3, 0x3, 0x80000001, 0x8f, 0x0, 0x0, 0x3f, 0x7fff, 0x67, 0x0, 0x10000, 0xffffffff, 0x7ff, 0x81, 0x2fed, 0x4, 0xf38d, 0x7f, 0x1, 0x1f, 0x3f, 0xc0, 0x60, 0x6, 0x6, 0x9, 0x74, 0x80, 0x4, 0x7, 0xffffff7f, 0x1f, 0x6, 0x7, 0x8, 0x7fffffff, 0x200, 0x8, 0x7ff, 0x401, 0x0, 0x81, 0xffff8001, 0x7, 0x9, 0xfffffffd, 0x7, 0x88, 0x8, 0x9, 0x8, 0x2, 0x401, 0x22f, 0xf540, 0x4, 0x7fff, 0xffffb677, 0x80000000, 0x1, 0x293, 0x2, 0x3, 0x5, 0x1f, 0x8, 0x2, 0x671, 0x2, 0x20, 0x80000001, 0x6, 0xfffffffa, 0x7fffffff, 0x3, 0x5, 0x5, 0x4, 0x9, 0x7f, 0xffff, 0x0, 0x7fff, 0xb158, 0x5, 0x4, 0x7f, 0x0, 0x0, 0x2573, 0x5e2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x21e}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x4048000}, 0x24044000) (async) unshare(0x4c060400) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) (rerun: 64) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async, rerun: 64) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async, rerun: 32) unshare(0x10000000) (async, rerun: 32) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 17:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 677.048443][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:27 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd70, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0) 17:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xc00000000000000}, 0x0) 17:53:27 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xe00000000000000}, 0x0) 17:53:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) write$rfkill(r0, &(0x7f0000000100)={0x2, 0x8, 0x2, 0x1}, 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x6, 0x2, 0x0, 0x1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r1, 0x3, 0x1f, 0x2}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7, 0xfffffffc, 0x3, 0x101, 0x2, 0x9], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 17:53:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd78, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf00000000000000}, 0x0) 17:53:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xb84}, 0x0) 17:53:28 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 677.708369][T25559] __nla_validate_parse: 1 callbacks suppressed [ 677.708389][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000002c0)=@newchain={0x8d4, 0x64, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x89c, 0x2, [@TCA_RSVP_POLICE={0x888, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x28, 0x6, 0xfffffffe, 0xf950, 0x7, {0x4, 0x1, 0x4, 0x5, 0x933e, 0x1f}, {0xff, 0x2, 0x6, 0x6d, 0x2}, 0x7, 0x0, 0x1ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfc000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x7, 0x9, 0x2, 0x33, 0x8, 0x100, 0x80000000, 0x6, 0x0, 0x80, 0x1, 0xf8, 0xff, 0x1f, 0x294, 0x6, 0x6, 0x8, 0xffffffff, 0x100, 0x80000001, 0xab6, 0x800, 0x5, 0x5, 0x0, 0x388, 0xffffffff, 0x4, 0x8000, 0x4, 0x4, 0x6, 0x2, 0x37b3, 0xff, 0x0, 0x80000000, 0x3ff, 0x80000001, 0x1ff, 0x800, 0x4, 0xd47, 0xfffffff9, 0x4, 0x400, 0x7, 0xfffffff9, 0x9, 0x400, 0x8001, 0x4, 0x6, 0x80000001, 0x7f, 0x7, 0x400, 0x4, 0x6, 0x2, 0x1, 0x4, 0x3, 0x7f, 0x1e, 0x80, 0x80000001, 0x1ff, 0x4, 0x8, 0x2, 0xb27, 0x3, 0x9, 0x0, 0x4, 0xfffffffd, 0x477e, 0x7fffffff, 0xffff, 0x4, 0x7, 0x10001, 0x4, 0x1ff, 0x7, 0x81, 0x1, 0x3f2, 0x5be74ab8, 0x9, 0x6, 0x1708f19f, 0x81, 0x9, 0x5, 0x3, 0x4, 0x3efd, 0x1, 0x4, 0x5, 0xfd45, 0x8, 0x2, 0x4, 0x8ac, 0x3a02, 0x8, 0x7, 0x279, 0x50500, 0x7, 0x7, 0xb9, 0x3b, 0x0, 0x1e, 0x2, 0x5, 0x1000, 0x4, 0x400, 0x9, 0x8, 0x3, 0x4777, 0xffffffff, 0x4, 0x7, 0x80000000, 0x101, 0x8000, 0x7bb, 0x8, 0x40, 0xb4b, 0x400, 0x5, 0x1, 0x0, 0x80, 0x80000001, 0x80000000, 0xd92b, 0x0, 0x3f, 0xe81, 0x7455ddd1, 0xa00000, 0x0, 0x6, 0xc1, 0x0, 0x5, 0x3ff, 0x286, 0xfffff49a, 0x3, 0x7, 0x5, 0x1, 0x7fff, 0x200, 0x7bde7230, 0x2, 0xfffffffe, 0x7fff, 0x3, 0x6, 0x3, 0xfffffffe, 0x4, 0x8, 0xfffffffc, 0x2, 0x3864, 0x7ff, 0x3, 0x8, 0xe509, 0xffffff81, 0x4, 0x3, 0x8, 0x0, 0x7, 0x7, 0x400, 0x70, 0xe, 0x3, 0x3d4, 0x5, 0xa90, 0x9, 0x0, 0x80000001, 0x1, 0x5, 0x9, 0x800, 0x5, 0x80, 0x1, 0xffffff01, 0x3, 0x200, 0xf141, 0x9, 0x5, 0x7, 0xfffff800, 0x7, 0x3, 0x4316, 0x1, 0xfffffff7, 0x0, 0x5, 0x6, 0x2, 0x5, 0x7, 0x4dec, 0x1800000, 0x5, 0x7, 0x6, 0x1ff, 0x8, 0x3f, 0xfffffe88, 0x2, 0x3, 0x0, 0x1, 0x4, 0x1, 0x0, 0x2, 0x4fe6, 0x10001, 0xfffffffb, 0x8, 0x2, 0x8000, 0x9, 0x9, 0x8, 0x9, 0xfff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x3, 0x4, 0x5, 0x2, 0xff, 0x1ff, 0x40, 0x3f, 0x1ff, 0xfff, 0x8, 0x7, 0x1, 0x3ff, 0x2, 0xfffff801, 0x8000, 0x3f, 0x1, 0xffffffc0, 0x4, 0x4, 0xa5138000, 0x8, 0xff, 0x2, 0xa209, 0x9, 0x4, 0x520, 0x8, 0x2, 0x2, 0x5f1a4afe, 0xa1, 0x100, 0x9, 0x401, 0x7, 0x9, 0x4, 0x9, 0x9, 0x4, 0x8001, 0xff, 0x8a2, 0xafc7, 0x3, 0x4a, 0x1000, 0x8, 0x6, 0x4, 0x4, 0xfffffc00, 0x3, 0x8001, 0xfd, 0x7fff, 0x6e, 0xfff, 0x1f, 0x200, 0x80000000, 0x8, 0xed85, 0x7, 0x2, 0x40, 0x5, 0xff, 0x850, 0x8, 0x200, 0x7, 0xffffd422, 0xc5b, 0x81, 0x11e8, 0x80000001, 0x80, 0x8, 0x0, 0x2, 0x4, 0x2, 0xfffff1ab, 0x2, 0x9fc, 0x3, 0x0, 0x200, 0xffffffff, 0x5, 0x20, 0x1f, 0x4, 0xe91, 0x1ff, 0x0, 0x6, 0x3ff, 0x81, 0x0, 0x2814, 0x6, 0x3, 0xffffffff, 0x1, 0x1, 0xff, 0xeb, 0x1, 0x7ff, 0x8, 0x40000000, 0x0, 0x4f, 0x9, 0x9, 0x8, 0x2, 0x7, 0xfff, 0x1f, 0x1, 0x5, 0x3, 0x9, 0x5, 0x7ff, 0x6, 0x4, 0x4, 0xe42fc71, 0x6, 0x1ff, 0x731, 0x2, 0x5, 0x6, 0x8000, 0x8, 0x8, 0x3, 0x20, 0x621, 0x4, 0x4, 0x81, 0x6, 0x7, 0x6, 0x800, 0x3, 0x9, 0x0, 0x3, 0x3, 0x8, 0x401, 0x2, 0xff, 0x3, 0x3, 0x80000001, 0x8f, 0x0, 0x0, 0x3f, 0x7fff, 0x67, 0x0, 0x10000, 0xffffffff, 0x7ff, 0x81, 0x2fed, 0x4, 0xf38d, 0x7f, 0x1, 0x1f, 0x3f, 0xc0, 0x60, 0x6, 0x6, 0x9, 0x74, 0x80, 0x4, 0x7, 0xffffff7f, 0x1f, 0x6, 0x7, 0x8, 0x7fffffff, 0x200, 0x8, 0x7ff, 0x401, 0x0, 0x81, 0xffff8001, 0x7, 0x9, 0xfffffffd, 0x7, 0x88, 0x8, 0x9, 0x8, 0x2, 0x401, 0x22f, 0xf540, 0x4, 0x7fff, 0xffffb677, 0x80000000, 0x1, 0x293, 0x2, 0x3, 0x5, 0x1f, 0x8, 0x2, 0x671, 0x2, 0x20, 0x80000001, 0x6, 0xfffffffa, 0x7fffffff, 0x3, 0x5, 0x5, 0x4, 0x9, 0x7f, 0xffff, 0x0, 0x7fff, 0xb158, 0x5, 0x4, 0x7f, 0x0, 0x0, 0x2573, 0x5e2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x21e}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x4048000}, 0x24044000) (async) unshare(0x4c060400) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000c0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) (async, rerun: 64) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000001, 0x0, 0x2811fdff) (async, rerun: 64) unshare(0x10000000) (async, rerun: 64) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x310a000000000000}, 0x0) 17:53:28 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) write$rfkill(r0, &(0x7f0000000100)={0x2, 0x8, 0x2, 0x1}, 0x8) (async, rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x6, 0x2, 0x0, 0x1}, 0x8) (rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r1, 0x3, 0x1f, 0x2}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) memfd_secret(0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7, 0xfffffffc, 0x3, 0x101, 0x2, 0x9], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 17:53:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd80, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xc00}, 0x0) 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 678.021438][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x6558000000000000}, 0x0) 17:53:28 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xe00}, 0x0) 17:53:28 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd88, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x8100000000000000}, 0x0) [ 678.294546][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (rerun: 32) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 17:53:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) open(&(0x7f0000000300)='./file0\x00', 0x2, 0x224) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffff15, 0x60}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 17:53:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd90, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xf00}, 0x0) 17:53:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 17:53:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000100)={0x2, 0x8, 0x2, 0x1}, 0x8) (rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x6, 0x2, 0x0, 0x1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r1, 0x3, 0x1f, 0x2}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) memfd_secret(0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7, 0xfffffffc, 0x3, 0x101, 0x2, 0x9], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 17:53:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 678.723334][T25638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 17:53:29 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xd98, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:29 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x1f00}, 0x0) 17:53:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) open(&(0x7f0000000300)='./file0\x00', 0x2, 0x224) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffff15, 0x60}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) [ 678.979276][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x9, 0x0, 0xffffffff, 0x1, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 17:53:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x3f00}, 0x0) 17:53:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xda0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}}, 0x0) [ 679.436344][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x6000}, 0x0) 17:53:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[0x2, 0x401, 0x1, 0x5, 0x134]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 17:53:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xda8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 679.648329][T25701] rfkill: input handler disabled 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 679.716629][T25709] rfkill: input handler enabled [ 679.733362][T25710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000001, 0x0, 0x2811fdff) (async) open(&(0x7f0000000300)='./file0\x00', 0x2, 0x224) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x13, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x202, 0x18, 0x0, 0x0, 0x1001, "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"}]}, 0x1020}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffff15, 0x60}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 17:53:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x9, 0x0, 0xffffffff, 0x1, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 17:53:30 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x840b}, 0x0) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 17:53:30 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdb0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:30 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) unshare(0x6c060000) pipe(&(0x7f00000002c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r0}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x67b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) splice(0xffffffffffffffff, &(0x7f00000003c0)=0xa871, 0xffffffffffffffff, &(0x7f0000000400)=0x9d13, 0x5, 0xc) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=@ipv4_delrule={0x1c, 0x21, 0x2, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x10008}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d8c4}, 0x4040080) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="10012bbd7000fcdbdf250b0000003c000180b0643f14008b84e61fa67a88eaec0200776c546e31000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6873720000000008000300030000003c00018008000100", @ANYRES32=r3, @ANYBLOB="140002006261746164765f736c6176655f30000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020076657468315f6d61637674617000000014000200766c616e3000000000000000000000001400020076657468305f746f5f6272696467650008000300010000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="200001801400020076657468305f766972745f77696669000800030003000000"], 0x140}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 17:53:30 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[0x2, 0x401, 0x1, 0x5, 0x134]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[0x2, 0x401, 0x1, 0x5, 0x134]}) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup3(r1, r0, 0x0) (async) 17:53:30 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 680.338267][T25740] rfkill: input handler disabled [ 680.344175][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.399722][T25745] rfkill: input handler enabled 17:53:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdb8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 680.435206][T25749] rfkill: input handler disabled 17:53:31 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x9605}, 0x0) [ 680.499541][T25747] warn_alloc: 4 callbacks suppressed 17:53:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 680.499559][T25747] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 680.568792][T25747] CPU: 1 PID: 25747 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00247-g83e396641110 #0 [ 680.572248][T25769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.579327][T25747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.579341][T25747] Call Trace: [ 680.579348][T25747] [ 680.579354][T25747] dump_stack_lvl+0xcd/0x134 [ 680.579383][T25747] warn_alloc.cold+0x9b/0x189 [ 680.579407][T25747] ? zone_watermark_ok_safe+0x290/0x290 [ 680.579428][T25747] ? lock_downgrade+0x6e0/0x6e0 [ 680.579453][T25747] ? alloc_pages_bulk_array_mempolicy+0x1cb/0x4d0 [ 680.579521][T25747] ? __vmalloc_node_range+0x7bf/0x1060 [ 680.579546][T25747] __vmalloc_node_range+0xe1e/0x1060 [ 680.579573][T25747] ? vfree_atomic+0xe0/0xe0 [ 680.579596][T25747] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 680.579623][T25747] ? __ldsem_down_read_nested+0x850/0x850 [ 680.579646][T25747] ? __wake_up_common+0x650/0x650 [ 680.662715][T25747] ? n_tty_open+0x16/0x170 [ 680.667133][T25747] vzalloc+0x67/0x80 [ 680.671034][T25747] ? n_tty_open+0x16/0x170 [ 680.675460][T25747] n_tty_open+0x16/0x170 [ 680.679699][T25747] ? n_tty_set_termios+0x1010/0x1010 [ 680.685030][T25747] tty_ldisc_open+0x9b/0x110 [ 680.689629][T25747] tty_ldisc_setup+0x43/0x100 [ 680.694308][T25747] tty_init_dev.part.0+0x1f4/0x610 [ 680.699428][T25747] ? pty_unix98_compat_ioctl+0x50/0x50 [ 680.704885][T25747] tty_init_dev+0x5b/0x80 [ 680.709210][T25747] ptmx_open+0x112/0x360 [ 680.713530][T25747] ? pty_unix98_compat_ioctl+0x50/0x50 [ 680.718986][T25747] chrdev_open+0x266/0x770 [ 680.723404][T25747] ? cdev_device_add+0x210/0x210 [ 680.728339][T25747] ? fsnotify_perm.part.0+0x22d/0x620 [ 680.733703][T25747] do_dentry_open+0x4b9/0x1240 [ 680.738464][T25747] ? cdev_device_add+0x210/0x210 [ 680.743406][T25747] ? may_open+0x1f6/0x420 [ 680.747732][T25747] path_openat+0x1c9e/0x2940 [ 680.752319][T25747] ? path_lookupat+0x860/0x860 [ 680.757079][T25747] do_filp_open+0x1aa/0x400 [ 680.761580][T25747] ? may_open_dev+0xf0/0xf0 [ 680.766080][T25747] ? rwlock_bug.part.0+0x90/0x90 [ 680.771025][T25747] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 680.777261][T25747] ? _find_next_bit+0x1e3/0x260 [ 680.782100][T25747] ? _raw_spin_unlock+0x24/0x40 [ 680.786940][T25747] ? alloc_fd+0x2f0/0x670 [ 680.791260][T25747] do_sys_openat2+0x16d/0x4d0 [ 680.795926][T25747] ? rcu_read_lock_sched_held+0xd/0x70 [ 680.801377][T25747] ? build_open_flags+0x6f0/0x6f0 [ 680.806389][T25747] ? lock_acquire+0x442/0x510 [ 680.811057][T25747] ? lock_release+0x522/0x720 [ 680.815727][T25747] ? __context_tracking_exit+0xb8/0xe0 [ 680.821182][T25747] ? lock_downgrade+0x6e0/0x6e0 [ 680.826027][T25747] __x64_sys_openat+0x13f/0x1f0 [ 680.830871][T25747] ? __ia32_sys_open+0x1c0/0x1c0 [ 680.835886][T25747] ? syscall_enter_from_user_mode+0x21/0x70 [ 680.841775][T25747] do_syscall_64+0x35/0xb0 [ 680.846186][T25747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.852075][T25747] RIP: 0033:0x7fd1fe951059 [ 680.856485][T25747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 680.876262][T25747] RSP: 002b:00007fd1fd263168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.884845][T25747] RAX: ffffffffffffffda RBX: 00007fd1fea641d0 RCX: 00007fd1fe951059 [ 680.892804][T25747] RDX: 0000000000000041 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 680.900764][T25747] RBP: 00007fd1fe9ab08d R08: 0000000000000000 R09: 0000000000000000 [ 680.908723][T25747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.916680][T25747] R13: 00007ffe235364cf R14: 00007fd1fd263300 R15: 0000000000022000 [ 680.924645][T25747] [ 680.934116][T25747] Mem-Info: [ 680.943245][T25747] active_anon:4548 inactive_anon:156664 isolated_anon:0 [ 680.943245][T25747] active_file:5133 inactive_file:7538 isolated_file:0 [ 680.943245][T25747] unevictable:768 dirty:0 writeback:0 [ 680.943245][T25747] slab_reclaimable:22140 slab_unreclaimable:114381 17:53:31 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdc0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) [ 680.943245][T25747] mapped:27624 shmem:6052 pagetables:918 bounce:0 [ 680.943245][T25747] kernel_misc_reclaimable:0 [ 680.943245][T25747] free:1289717 free_pcp:10832 free_cma:0 [ 681.019874][T25747] Node 0 active_anon:18184kB inactive_anon:621584kB active_file:20456kB inactive_file:30152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110496kB dirty:0kB writeback:0kB shmem:21732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 161792kB writeback_tmp:0kB kernel_stack:10884kB pagetables:3664kB all_unreclaimable? no [ 681.059337][T25747] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 681.089112][T25778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 681.100036][T25747] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.129879][T25747] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 681.146819][T25747] Node 0 DMA32 free:1209736kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:18184kB inactive_anon:615256kB active_file:20456kB inactive_file:30152kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:42568kB local_pcp:22068kB free_cma:0kB [ 681.178330][T25747] lowmem_reserve[]: 0 0 0 0 0 [ 681.184765][T25747] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.211827][T25747] lowmem_reserve[]: 0 0 0 0 0 [ 681.217361][T25747] Node 1 Normal free:3949228kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.246687][T25747] lowmem_reserve[]: 0 0 0 0 0 [ 681.251504][T25747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 681.264536][T25747] Node 0 DMA32: 258*4kB (UME) 1616*8kB (UME) 720*16kB (UME) 478*32kB (UME) 159*64kB (UME) 61*128kB (UME) 22*256kB (UME) 3*512kB (ME) 3*1024kB (M) 3*2048kB (UM) 277*4096kB (UM) = 1209736kB [ 681.285346][T25747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 681.297293][T25747] Node 1 Normal: 117*4kB (UME) 183*8kB (UE) 136*16kB (UE) 91*32kB (UE) 53*64kB (UME) 36*128kB (U) 14*256kB (UE) 7*512kB (UE) 1*1024kB (U) 1*2048kB (U) 958*4096kB (M) = 3949228kB [ 681.315964][T25747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.325660][T25747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 681.335119][T25747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.344798][T25747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 681.354437][T25747] 18723 total pagecache pages [ 681.359181][T25747] 0 pages in swap cache [ 681.363394][T25747] Swap cache stats: add 0, delete 0, find 0/0 17:53:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x9, 0x0, 0xffffffff, 0x1, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r3 = syz_open_pts(r1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x16, 0x0, 0x1ac, &(0x7f0000000480)}) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x9, 0x0, 0xffffffff, 0x1, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xe}, 0x0) 17:53:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xe703}, 0x0) 17:53:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdc8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:32 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x6c060000) (async) pipe(&(0x7f00000002c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r0}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f450c72c75200f90100000000000000029f5b001f00000006020000000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004200000000000000000000001000000d90600000000002108000000000000004b0000000000003606000000030000000010000000000000fdffffffffffffff1f000000000000000000000000000000070000000000ff01000000fe3b889cd92aabb5fc1de4648e0e6811ecf38ab033f77e07886d60226e774dadd4f62f3c8c2837d8376bd85baf18b09dd97ee98b23c16628e099ed614fbbc4fb705ebb9d467153594be242b15b5c0dc5c4d2020000afc15c2698584b8b752d84b8721700c2a39474ee9f60b3959ce631eb51cda70dc5a3fa08081e3bed8b5d90cecda427e50b39764bd6cee6aa072591b8"], 0x67b) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket(0x11, 0x800000003, 0x0) splice(0xffffffffffffffff, &(0x7f00000003c0)=0xa871, 0xffffffffffffffff, &(0x7f0000000400)=0x9d13, 0x5, 0xc) (async) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=@ipv4_delrule={0x1c, 0x21, 0x2, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x10008}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d8c4}, 0x4040080) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="10012bbd7000fcdbdf250b0000003c000180b0643f14008b84e61fa67a88eaec0200776c546e31000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6873720000000008000300030000003c00018008000100", @ANYRES32=r3, @ANYBLOB="140002006261746164765f736c6176655f30000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020076657468315f6d61637674617000000014000200766c616e3000000000000000000000001400020076657468305f746f5f6272696467650008000300010000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="200001801400020076657468305f766972745f77696669000800030003000000"], 0x140}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) (rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) [ 681.369544][T25747] Free swap = 0kB [ 681.373296][T25747] Total swap = 0kB [ 681.377124][T25747] 2097051 pages RAM [ 681.380964][T25747] 0 pages HighMem/MovableOnly [ 681.385755][T25747] 384533 pages reserved [ 681.389946][T25747] 0 pages cma reserved [ 681.395915][T25747] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 681.416672][T25747] rfkill: input handler enabled 17:53:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[0x2, 0x401, 0x1, 0x5, 0x134]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[0x2, 0x401, 0x1, 0x5, 0x134]}) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup3(r1, r0, 0x0) (async) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 681.570249][T25813] rfkill: input handler disabled 17:53:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdd0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xf000}, 0x0) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 681.629455][T25815] rfkill: input handler enabled 17:53:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r3, 0x5451) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 17:53:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 17:53:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdd8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 17:53:32 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0x6c060000) (async) pipe(&(0x7f00000002c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r0}, 0x10) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f450c72c75200f90100000000000000029f5b001f00000006020000000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004200000000000000000000001000000d90600000000002108000000000000004b0000000000003606000000030000000010000000000000fdffffffffffffff1f000000000000000000000000000000070000000000ff01000000fe3b889cd92aabb5fc1de4648e0e6811ecf38ab033f77e07886d60226e774dadd4f62f3c8c2837d8376bd85baf18b09dd97ee98b23c16628e099ed614fbbc4fb705ebb9d467153594be242b15b5c0dc5c4d2020000afc15c2698584b8b752d84b8721700c2a39474ee9f60b3959ce631eb51cda70dc5a3fa08081e3bed8b5d90cecda427e50b39764bd6cee6aa072591b8"], 0x67b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) splice(0xffffffffffffffff, &(0x7f00000003c0)=0xa871, 0xffffffffffffffff, &(0x7f0000000400)=0x9d13, 0x5, 0xc) (async) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=@ipv4_delrule={0x1c, 0x21, 0x2, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x10008}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d8c4}, 0x4040080) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="10012bbd7000fcdbdf250b0000003c000180b0643f14008b84e61fa67a88eaec0200776c546e31000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6873720000000008000300030000003c00018008000100", @ANYRES32=r3, @ANYBLOB="140002006261746164765f736c6176655f30000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020076657468315f6d61637674617000000014000200766c616e3000000000000000000000001400020076657468305f746f5f6272696467650008000300010000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="200001801400020076657468305f766972745f77696669000800030003000000"], 0x140}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 17:53:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r3, 0x5451) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$FIOCLEX(r3, 0x5451) (async) 17:53:32 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xff00}, 0x0) 17:53:32 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xde0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (async, rerun: 32) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 17:53:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 17:53:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xa31}, 0x0) 17:53:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xde8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:33 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) r2 = syz_open_pts(r1, 0x0) (async, rerun: 32) r3 = epoll_create1(0x0) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) pipe(0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 32) read(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$FIOCLEX(r3, 0x5451) [ 682.448752][T25881] ptm ptm2: ldisc open failed (-12), clearing slot 2 17:53:33 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 17:53:33 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0) 17:53:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdf0, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 17:53:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffff}, 0x0) 17:53:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x80, 0x30, [0x6, 0x100000001, 0x10001, 0x3c], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read(0xffffffffffffffff, 0x0, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1ac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7f, 0x7, 0xf800, 0x1000, 0x215]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcaa}, @NL80211_ATTR_FRAME={0x148, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x373f}, @device_b, @broadcast, @from_mac=@broadcast, {0x0, 0x81}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x2, 0x0, {0xffffffffffffffff, 0x6, 0x0, 0xff, 0x0, 0x1, 0x1}, 0x400, 0x80000000, 0x5}}, @void, [{0xdd, 0x2c, "60828c300629bb92d1f76f54b53782c3219be33449a984fdfdf0b342bb74f3213b61b3c247f8265e41f97ef4"}, {0xdd, 0x39, "071520cdd6c727133ede20a0d5f3c13a694ef10507d8c323929c030bba9af56955f4f56be83079efc7783e8caaa851e3b7f8db5a5546f7a6ce"}, {0xdd, 0x9d, "ec36cd3237485f0985f75bec86af09a43786bb13afbd299baf1ccddf2cb6214f3e91f92aa84dfa5bc9a31a0268f6878a1272e61871a9058a8ef0205e3efacc2a6c22855539977de57cb93b306fd49232c28fe154ba6e08d751044cf9ff6e0b5df553d74190c936b2e6f2db02a4c4c0a4cb03f6b9197edbd65b3b9e60593b100b64b6cc33ed7813c405db32f6fbac7896eb7c5668f83688ea20e57b49cc"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x29, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x80}, @device_b, @device_a, @random="b8987461b270", {0x3, 0x2}}, @tdls_setup_resp={0xc, 0x1, 0x31, 0xff, @val=0x20, @val={0x1, 0x4, [{0x60}, {0x9, 0x1}, {0x9, 0x1}, {0x18}]}, @void, @void}}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x20000040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80488567e5e3990cfae593f66934ea4b1c56fde026a5763b47eed28e215469abf4f8418498f042a5ad4cc4f67e4ad1e9d45d71b84c8e23b290b4924751d32f22234c2fff7b7c826f6cd9d869c655"], 0x20}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0xc7e3, 0x0, 0x800, 0x7, 0xe47b, 0x4, 0x0]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8804) 17:53:34 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) (async) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x310a}, 0x0) [ 683.523346][T25931] __nla_validate_parse: 5 callbacks suppressed [ 683.523363][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0xdf8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 17:53:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000001, 0x0, 0x2811fdff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1ac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7f, 0x7, 0xf800, 0x1000, 0x215]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcaa}, @NL80211_ATTR_FRAME={0x148, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x373f}, @device_b, @broadcast, @from_mac=@broadcast, {0x0, 0x81}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x2, 0x0, {0xffffffffffffffff, 0x6, 0x0, 0xff, 0x0, 0x1, 0x1}, 0x400, 0x80000000, 0x5}}, @void, [{0xdd, 0x2c, "60828c300629bb92d1f76f54b53782c3219be33449a984fdfdf0b342bb74f3213b61b3c247f8265e41f97ef4"}, {0xdd, 0x39, "071520cdd6c727133ede20a0d5f3c13a694ef10507d8c323929c030bba9af56955f4f56be83079efc7783e8caaa851e3b7f8db5a5546f7a6ce"}, {0xdd, 0x9d, "ec36cd3237485f0985f75bec86af09a43786bb13afbd299baf1ccddf2cb6214f3e91f92aa84dfa5bc9a31a0268f6878a1272e61871a9058a8ef0205e3efacc2a6c22855539977de57cb93b306fd49232c28fe154ba6e08d751044cf9ff6e0b5df553d74190c936b2e6f2db02a4c4c0a4cb03f6b9197edbd65b3b9e60593b100b64b6cc33ed7813c405db32f6fbac7896eb7c5668f83688ea20e57b49cc"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x29, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x80}, @device_b, @device_a, @random="b8987461b270", {0x3, 0x2}}, @tdls_setup_resp={0xc, 0x1, 0x31, 0xff, @val=0x20, @val={0x1, 0x4, [{0x60}, {0x9, 0x1}, {0x9, 0x1}, {0x18}]}, @void, @void}}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x20000040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c00000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="04002d80488567e5e3990cfae593f66934ea4b1c56fde026a5763b47eed28e215469abf4f8418498f042a5ad4cc4f67e4ad1e9d45d71b84c8e23b290b4924751d32f22234c2fff7b7c826f6cd9d869c655"], 0x20}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0xc7e3, 0x0, 0x800, 0x7, 0xe47b, 0x4, 0x0]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xffff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8804) 17:53:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 17:53:34 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) r3 = syz_mount_image$adfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xa0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="f1a7e3e8", 0x4, 0x9}, {&(0x7f0000000240)="e3d42d37b0581ec818ad4e618c485e44df008423f94d1decff66f6bc6936cd44e43ffad51d1cca19fa8f9ff79b81bde6b7f58b58141e042a0fb14c32c6f60743bac4fce712f0e82e85f940c5c28c7cd07c0862168ca9dedd50d6dc3748db0f29daebe8ad4734ea680935322ebc3008262c4eb80312c3668ccb905e1f49660d4c730e35d313173d99309e2724e889d036f23830dd19dffc49f42d104c48a7d8f3e12c306e8da9db79aaff3e249e24bfcfda06f88bdc46424ddaa45a7a0c46e2180f7b30d0317c0bf9934793be457bf84ec0f760a0d9d5fb506b25eb4c85563cdbe7a010c107", 0xe5, 0x9d5}, {&(0x7f0000000400)="885711339f532cbab5b6f46da63303349bd1bdd742b4efb61d25cd00e2cd6b1d05f0498f1982ef6eb0a1360551f66d0552c21847afe451deba3050e035ca3e0691ba27603bbd7cec7562e1065cb1e2ef15c6f61f5108ac4e996396cfc35ae7c5c90b199fe454c03f85965380e2eaf5223506b6e1a9a9594a4336d219e7d8442e4ebdb1bcc1a268", 0x87, 0x8001}], 0x1, &(0x7f00000004c0)={[{'blkio.bfq.io_merged\x00'}], [{@context={'context', 0x3d, 'staff_u'}}]}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) r6 = memfd_secret(0x80000) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000140)) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000500)) [ 683.766486][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0xc01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) [ 683.838548][T25971] loop3: detected capacity change from 0 to 128 [ 683.867708][T25971] ADFS-fs (loop3): unrecognised mount option "blkio.bfq.io_merged" or missing value 17:53:34 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) (rerun: 32) r2 = syz_open_pts(r1, 0x0) r3 = epoll_create1(0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000180)={0x80, 0x30, [0x6, 0x100000001, 0x10001, 0x3c], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) pipe(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async, rerun: 64) read(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 17:53:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0