# https://syzkaller.appspot.com/bug?id=250a4d7de3a797038502dc12e74005df50049e8c # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"repeat":true,"procs":1,"slowdown":1,"sandbox":"","sandbox_arg":0,"close_fds":false,"tmpdir":true,"segv":true} r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="080005000b0000009aacccfd6150ad76a3784a86680d50677242e39be603e1cc3a399281522d438a260c0216d9a7d998193b79707588be0794607f3d1879d01359c972c88ba945db796f1b0da303cbed82fa09bebc311580c603c20b6a6aa744c0aedb9a5b6103f62f"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000600)="0706", 0x2, r5) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = openat$nullb(0xffffff9c, 0x0, 0x40000, 0x0) ioctl$BLKIOMIN(r7, 0x1278, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'})