="d2", 0x1, 0x0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f00000001c0)=0x4) 17:06:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14}}], 0x68}, 0x0) 17:06:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='status\x00') write$P9_RCREATE(r1, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r2, 0x29, 0x1f, 0xc0, 0x3ff, 0x25, @local, @local, 0x20, 0x20, 0x3, 0x1ff}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 17:06:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "7233d598f1b4f41dfbb1181d4cd3c2a4146cc5e79a7cc204cc44c2d16c75fc0000000000000000000057860ae2a96e3126b5621d1e2fc4f0815dd594cc047c3ad05be82ef55b7d35666088000200"}, 0xd8) 17:06:35 executing program 4: mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:06:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5b", 0x2a}], 0x1, 0x0, 0xffffffff00000000}, 0x0) 17:06:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:06:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@private0, @mcast1, @dev}) 17:06:35 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) 17:06:35 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @local}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xd2}]}}}], 0x80}, 0x0) 17:06:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:06:36 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x404c534a, &(0x7f0000000040)={{0x95}}) 17:06:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004e00)=[{{&(0x7f0000000040)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000012c0)=[@mark={{0x14}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x0) 17:06:36 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:36 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0) 17:06:36 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17:06:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x90000012}) 17:06:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:06:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) 17:06:36 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) 17:06:36 executing program 3: set_mempolicy(0x1, 0x0, 0x0) pipe2(0x0, 0x0) 17:06:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, @generic={0x0, "692c1c5779619229353d92bb5c76"}, @tipc, @hci}) 17:06:36 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x80087601, 0x0) 17:06:36 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:06:36 executing program 0: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/wireless\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x88440, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x154}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000280)={r8, 0x0, 0x5e, "fc2af67c088d02deb719557531d373dcfc1ddf45a3237077a615af7608ff87f48ff640a304504b7da51624e3bb3900bce7cfe4b8b7001bdf1e547e3dbf4ff0a9e281b787d5a1f41c539c5034bb6bc1222c99de9e08b9dc1f888f0d91b27a"}, 0x66) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000080)=0x2) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 17:06:36 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r0, 0x0, 0xffffffffffffff9a) 17:06:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 17:06:37 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:06:37 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 17:06:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000140)={0x6}) 17:06:37 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="b7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40801) 17:06:37 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}, {{&(0x7f00000010c0)=@isdn, 0x80, 0x0}}], 0x2, 0x0) 17:06:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0xe, 0x0, &(0x7f00000012c0)) 17:06:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x40000000000}, 0x842c, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="0d4a94d2d6524cfa957abe44b99aa2ad6721680848b790eeeb1d6d7e34083ea0a783360ca6fd1dcfdcdd88ea3089434b6f1296ad6474dfd7c184ab50253614dee054116ba934f73ceed43ac9336c0e51ad2c16cdb282de9922bdc3606b5387bf9634f58371ae81cfce3b77cdc4102af3d907d9d249ef2e63727d4bdc4824f8ba3fe6e01a34c6f41f563007f7354416fbb05b551bedfd2a900bb060e686bcf0ea4cb73dc42192eca44edfdd1ae4d0f573ec9c53f37fb2a9bd6b9320b3402ec6bf30c4b380fe8d5237c9aa334282d65514c77ed5d1206a823de518cb5aade797041d44748360080423af4fcb409d073bae44") syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8800) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:37 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:06:37 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') 17:06:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002500)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000440)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001700)='t', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{&(0x7f0000001e40)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f00000020c0)=[{&(0x7f0000001e80)='L', 0x1}], 0x1}}, {{&(0x7f0000002100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=[@dontfrag={{0x14}}], 0x18}}], 0x4, 0x8000) 17:06:37 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:37 executing program 5: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 17:06:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="b7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=[{0x10}], 0x10}}], 0x2, 0x40801) 17:06:37 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000040)) 17:06:37 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {r0, r1+10000000}}, 0x0) 17:06:37 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) 17:06:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000001340)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 17:06:37 executing program 5: ioperm(0x0, 0x3ff, 0x2) 17:06:38 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:38 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/igmp6\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='fd/4\x00') 17:06:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="b71c", 0x2}], 0x1, &(0x7f0000000380)=[{0x10}], 0x10}}], 0x1, 0x40801) 17:06:38 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) 17:06:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x1, @pix={0x7, 0x9, 0x3147504d, 0x6, 0x400, 0x8, 0xa, 0x7fff, 0x0, 0x0, 0x1, 0x6}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x10880, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:38 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) 17:06:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5bbdfb5c8f2e247849c1beae44de28d69f7b7d047aad6452684b6e7377c18722d2afe7322031d51d3295a2852c4e533ba3bdcbf9f324fabd7419438cfa16d6bc3ac260393fb303f64bf20328ce06fb601abfb8f181cc3b2a0cf877ec9a388f224a9a12e55f65cb21b5b522756c16520cb79b7ed9b9d00e70d04c86267669a16f2f73866f5734c1f59933a8fceb4ff61bfc2dc666124d4cc4f1017e0acb8f08513141349d111ce3fcd66477213766", 0xd7}], 0x1}, 0x0) 17:06:38 executing program 2: socket(0x2, 0x2, 0x5) 17:06:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 17:06:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}], 0x20}, 0x0) 17:06:38 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:38 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/129, 0x81}], 0x1, 0x0) 17:06:38 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x1c) 17:06:38 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) 17:06:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/80, 0x50}], 0x1}}], 0x1, 0x20, &(0x7f0000004cc0)={0x0, 0x3938700}) 17:06:38 executing program 3: set_mempolicy(0x1, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@target={'target ', {'PCI:', '1a', ':', '6', ':', 'f', '.', '1a'}}, 0x15) 17:06:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x115840, 0x0) recvmsg$unix(r4, &(0x7f0000000700)={&(0x7f0000000080), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000580)=""/23, 0x17}], 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20ed0000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xa0}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) kcmp$KCMP_EPOLL_TFD(r1, r7, 0x7, r2, &(0x7f0000000740)={r4}) fdatasync(r5) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x0, 0x94, 0xf0, 0x2, 0x0, 0x1, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x8dad821a17ad2c, @perf_config_ext={0x9, 0x100}, 0x280, 0x0, 0xffffffd5, 0x4, 0x7, 0x1, 0x1, 0x0, 0x101, 0x0, 0xa33}, 0x0, 0x7, r6, 0xa) tkill(r7, 0xe) 17:06:39 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)=""/184, 0xb8}], 0x2, 0x0) 17:06:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 17:06:39 executing program 3: syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') 17:06:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}) 17:06:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}, 0x0) 17:06:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004580)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e7308b5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="6373a2c1e6378c66cf5be799c89e", 0xe}], 0x1}}], 0x1, 0x0) 17:06:39 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0bc5310, &(0x7f0000000080)={{}, 'port1\x00'}) 17:06:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) 17:06:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 17:06:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') 17:06:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0) 17:06:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20282) ioctl$SG_IO(r0, 0x2285, &(0x7f00000015c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001380)="0a59b41b4c15", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:06:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 17:06:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:39 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x8, 0x0, 0x0, @tick, {}, {}, @queue}], 0x1c) 17:06:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[{0x10}, {0x10, 0x1}], 0x20}}], 0x1, 0x0) 17:06:39 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000032c0), 0xffffffffffffffff) 17:06:39 executing program 2: r0 = epoll_create(0x8000001) r1 = syz_io_uring_setup(0x3cf4, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 17:06:39 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:39 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='pagemap\x00') 17:06:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r4 = signalfd4(r3, &(0x7f0000000200)={[0x5]}, 0x8, 0x80800) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000003c0)=ANY=[@ANYBLOB="bc030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"/22960]) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x840) 17:06:40 executing program 3: r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x1ff, 0x0, 0x0) 17:06:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:40 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40200) 17:06:40 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 17:06:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 17:06:40 executing program 2: mq_unlink(&(0x7f0000000000)='=A\xde\x18\x0e\x80\x10L.SA\x17\xcf\xef\xbc\x13~e\xddx\xf8\xaf\x05\xafi\xd9\xfc\xaa\xb6oXL\xff\x84rC\x00I\xd5\x92\x9e}\xf8;LX\x00x\xc8ly{H>E\x14\r\xb8\rp~dU\a;\xd5\xae5A\xee\xc8U\xfa\x8f\xb4)\xba\xb5\xb6f\x82\xc0\x8f\x17\xb32\xd1`\xb3`\xa0{\x1b\xfc\xcb\x80\xdcU?\xbd)$j\x9cm\xbb~A\t\ao\xa7\xe5I\xb3z\x92\x9f6\xbd') 17:06:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x5421, 0x0) 17:06:40 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, 0x0, 0x0) 17:06:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="dd", 0x1}], 0x1}, 0xc040) 17:06:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:40 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)=0x81) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) read$FUSE(r4, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0xba60) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8941, 0x0) 17:06:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x0) 17:06:40 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0xa, 0x0, &(0x7f0000000100), 0x6) 17:06:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x10, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:40 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000001c0)) 17:06:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x18, 0x0, "7951cc2418dd0485bdd41a32d38deb2b9404f74d4ea52ae579dad8664fac7ad1a061e97a489fba60ba6cb7d368b29973b1f7e074fac78580602f884337bcb7295027eed5059436eb7b4bc3e13cacf088"}, 0xd8) 17:06:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x4008040) 17:06:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') write$P9_RMKDIR(r0, 0x0, 0x0) 17:06:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5bbdfb5c8f2e247849c1beae44de28d69f7b7d047aad6452684b6e7377c18722d2afe7322031d51d3295a2852c4e533ba3bdcbf9f324fabd7419438cfa16d6bc3ac260393fb303f64bf20328ce06fb601abfb8f181cc3b2a0cf877ec9a388f224a9a12e55f65cb21b5b522756c16520cb79b7ed9b9d00e70d04c86267669a16f2f73866f5734c1f59933a8fceb4ff61bfc2dc666124d4cc4f1017e0acb8f08513141349d111ce3fcd6647721376694cb506960d6ed7b79fdc868a2043bc3987a7ebca1528bb45bdbd407f0b9", 0xf5}, {&(0x7f0000000180)="77c61fbcf6d0fb7508ef180f947a3900d45a9b83d7be320500b481321e518fc85c43427c91db613c009b736107e1639bbc8200c83602e21e7ef8c216c9b253a378e20ab7f2c09181fd3540d14fdf239d7e4cb627b7fc04771c3a38b012fd735e31ce92078c71102a7a207195de6c62b1319270f99c2843b87978487a95fc7845089324b74b83aa67abcc608a592e8e33cd30ee1bb8d34c30b60001c314d2d1c9d55e5790e20dd457283870f1f9272ac8fcb84179fdac5cf399981cb097d9d5b2f1513ae86cd5873cc085", 0xca}], 0x2, 0x0, 0x6000}, 0x0) 17:06:41 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="33d457e2057052c80fb6", 0xa) 17:06:41 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000003280)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="12", 0x1}], 0x1}}], 0x1, 0x24000040) 17:06:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x1) 17:06:41 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='status\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xa0000016}) 17:06:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="33d457e2057052c80f", 0x9) 17:06:41 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 17:06:41 executing program 5: process_vm_readv(0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) 17:06:41 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002240), 0x1, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) 17:06:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5b", 0x2a}], 0x1000015d}, 0x1) 17:06:41 executing program 5: socketpair(0x0, 0x18aa22ecaedd280a, 0x0, 0x0) 17:06:41 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='net/psched\x00') 17:06:41 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:41 executing program 3: pselect6(0x16, &(0x7f0000000080), &(0x7f0000000100)={0x2}, &(0x7f00000001c0), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000002c0), 0x8}) 17:06:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5bbdfb5c8f2e247849c1beae44de28d69f7b7d047aad6452684b6e7377c18722d2afe7322031d51d3295a2852c4e533ba3bdcbf9f324fabd7419438cfa16d6bc3ac260393fb303f64bf20328ce06fb601abfb8f181cc3b2a0cf877ec9a388f224a9a12e55f65cb21b5b522756c16520cb79b7ed9b9d00e70d04c86267669a16f2f73866f5734c1f59933a8fceb4ff61bfc2dc666124d4cc4f1017e0acb8f08513141349d111ce3fcd6647721376694cb506960d6ed7b79fdc868a2043bc3987a7ebca1528bb45bdbd407f0b9", 0xfcfa}, {&(0x7f0000000180)="77c61fbcf6d0fb7508ef180f947a3900d45a9b83d7be320500b481321e518fc85c43427c91db613c009b736107e1639bbc8200c83602e21e7ef8c216c9b253a378e20ab7f2c09181fd3540d14fdf239d7e4cb627b7fc04771c3a38b012fd735e31ce92078c71102a7a207195de6c62b1319270f99c2843b87978487a95fc7845089324b74b83aa67abcc608a592e8e33cd30ee1bb8d34c30b60001c314d2d1c9d55e5790e20dd457283870f1f9", 0xad}], 0x2}, 0x0) 17:06:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="33d457e2057052c8", 0x8) 17:06:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000007e80)=[{{&(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "db5fc5d2cdf8e09f4425e6b946c8b0ed8faf4fdb676410631b3f55a9b299bd9ed81ecc56d01af6df01b70d8b88e217150a04bba6d5f3e7f83814d7bc9bbb33"}, 0x80, 0x0, 0x0, &(0x7f0000001940)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) 17:06:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x0, 0xbf}}) 17:06:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_setup(0x69df, &(0x7f0000000040)={0x0, 0x7fe7, 0x2e, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:06:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:42 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x3e9c0) 17:06:42 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{}, 'port1\x00'}) 17:06:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5bbdfb5c8f2e247849c1beae44de28d69f7b7d047aad6452684b6e7377c18722d2afe7322031d51d3295a2852c4e533ba3bdcbf9f324fabd7419438cfa16d6bc3ac260393fb303f64bf20328ce06fb601abfb8f181cc3b2a0cf877ec9a388f224a9a12e55f65cb21b5b522756c16520cb79b7ed9b9d00e70d04c86267669a16f2f73866f5734c1f59933a8fceb4ff61bfc2dc666124d4cc4f1017e0acb8f08513141349d111ce3fcd6647721376694cb506960d6ed7b79fdc868a2043bc3987a7ebca1528bb45bdbd407f0b9", 0xf5}, {&(0x7f0000000180)="77c61fbcf6d0fb7508ef180f947a3900d45a9b83d7be320500b481321e518fc85c43427c91db613c009b736107e1639bbc8200c83602e21e7ef8c216c9b253a378e20ab7f2c09181fd3540d14fdf239d7e4cb627b7fc04771c3a38b012fd735e31ce92078c71102a7a207195de6c62b1319270f99c2843b87978487a95fc7845089324b74b83aa67abcc608a592e8e33cd30ee1bb8d34c30b60001c314d2d1c9d55e5790e20dd457283870f1f9272ac8fcb84179fdac5cf399981cb097d9d5b2f1513ae86cd5873cc085", 0xca}], 0x2, 0x0, 0x2}, 0x0) 17:06:42 executing program 1: r0 = gettid() ioprio_get$pid(0x3, r0) 17:06:42 executing program 5: clock_gettime(0x2, &(0x7f0000000440)) 17:06:42 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 17:06:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:42 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4001) 17:06:42 executing program 3: r0 = gettid() r1 = gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='status\x00') kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000000)) 17:06:42 executing program 5: getresuid(&(0x7f00000026c0), 0x0, 0x0) 17:06:42 executing program 2: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x9) 17:06:42 executing program 1: process_vm_readv(0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1, 0x0, 0x0, 0x0) 17:06:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="dd", 0x1}], 0x1}, 0x0) 17:06:42 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') 17:06:42 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x48}}, 0x0) 17:06:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='status\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x8000000) 17:06:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dd", 0x1}], 0x1}, 0x810) 17:06:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:42 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x4140) 17:06:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 17:06:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') dup2(r0, 0xffffffffffffffff) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000100)={0x0, 0x5, 0x1e}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={r6}) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:43 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x62d82) 17:06:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0305302, &(0x7f0000000080)={{}, 'port1\x00'}) 17:06:43 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) 17:06:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="dde23c3bdcc7f111701bf66d6049ee9f05212ac4a98957423d6c548e5d00301762e6976efb90abdf0a5bbdfb5c8f2e247849c1beae44de28d69f7b7d047aad6452684b6e7377c18722d2afe7322031d51d3295a2852c4e533ba3bdcbf9f324fabd7419438cfa16d6bc3ac260393fb303f64bf20328ce06fb601abfb8f181cc3b2a0cf877ec9a388f224a9a12e55f65cb21b5b522756c16520cb79b7ed9b9d00e70d04c86267669a16f2f73866f5734c1f59933a8fceb4ff61bfc2dc666124d4cc4f1017e0acb8f08513141349d111ce3fcd6647721376694cb506960d6ed7b79fdc868a2043bc3987a7ebca1528bb45bdbd407f0b9", 0xf5}, {&(0x7f0000000280)="77c61fbcf6d0fb7508ef180f947a3900d45a9b83d7be320500b481321e518fc85c43427c91db613c009b736107e1639bbc8200c83602e21e7ef8c216c9b253a378e20ab7f2c09181fd3540d14fdf239d7e4cb627b7fc04771c3a38b012fd735e31ce92078c71102a7a207195de6c62b1319270f99c2843b87978487a95fc7845089324b74b83aa67abcc608a592e8e33cd30ee1bb8d34c30b60001c314d2d1c9d55e5790e20dd457283870f1f9272ac8fcb84179fdac5cf399981cb097d9d5b2f1513ae86cd5873cc085", 0xffffffffffffff7a}], 0x2}, 0x810) 17:06:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/80, 0x50}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) 17:06:43 executing program 3: mq_unlink(&(0x7f0000000040)='\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) 17:06:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x3, "90"}]}}}], 0x18}, 0x0) 17:06:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001440)=[{0x0}, {0x0}, {&(0x7f0000000180)='0', 0x1}], 0x3, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}}}}], 0x20}, 0x0) 17:06:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x10}}], 0x78}, 0x0) 17:06:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x0, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4024800) 17:06:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}, {{&(0x7f00000010c0)=@isdn, 0x80, 0x0, 0x0, 0x0, 0x60}}], 0x2, 0x0) 17:06:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004580)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e7308b5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="2c919aa32b5bf45ed4a11eb35bd2", 0x1000e}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x2, 0x0) 17:06:43 executing program 2: r0 = gettid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/129, 0x81}, {0x0}], 0x2, 0x0) 17:06:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x0, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:43 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:06:43 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000003c0)={0x20, 0x0, 'client1\x00', 0x0, "38c7d3800c1e4a10", "5f0258132d0d851c65479e7f20ffb4ad32c3f1b230fd929ec62f754a56bd9abf"}) 17:06:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x0, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:43 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000400000028000180140002"], 0x48}}, 0x0) 17:06:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000002300)=[{{&(0x7f0000000280)=@l2tp, 0x80, 0x0}}], 0x1, 0x0) 17:06:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nfsfs\x00') write$P9_RCREATE(r0, 0x0, 0x0) 17:06:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={0x0}}, 0x0) [ 1235.876372][ T2572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.910624][ T2574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 17:06:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) ptrace$peek(0x3, r1, &(0x7f00000000c0)) fdatasync(r4) r5 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3f, 0x1, 0x80, 0x6, 0x0, 0x4, 0x21040, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x1, 0x10000, 0x8, 0x7f, 0x401, 0x0, 0x0, 0x80000001}, r5, 0x7, r2, 0xb) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:44 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/prev\x00') 17:06:44 executing program 1: add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000280)="14", 0x1, 0xfffffffffffffffd) 17:06:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 17:06:44 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 17:06:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000004580)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e7308b5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="2c919aa32b5bf45ed4a11eb35bd2", 0x2000008e}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x2, 0x0) 17:06:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @local}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x80}, 0x0) 17:06:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x4008000) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000002c0)="0ea7dfe20852f0cf3d78feaee1b191d601c51d9906b3f2c0700734483f33c469d3ea1dd5169950e9bf80231d29a55bfb28e053b519aa9437567ecd26d28a2e87", 0x40}], 0x1, &(0x7f0000001980)=ANY=[], 0x1d8}, 0x0) 17:06:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40028054) 17:06:44 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}, {{&(0x7f00000010c0)=@isdn, 0x80, 0x0, 0x0, 0x0, 0x6000}}], 0x2, 0x0) 17:06:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000041c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffe7ffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:44 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 17:06:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.stat\x00', 0x80040, 0x0) 17:06:44 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:06:44 executing program 2: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000002c0)='W', 0x1, 0xfffffffffffffffb) 17:06:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@remote}) 17:06:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000000480)=[{{&(0x7f0000000d00)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000000)="dd53f671864d32784b45c71f79cd", 0xe}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000ab00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000007040)=""/4096, 0x1000}], 0x1}}], 0x2, 0x2, &(0x7f000000acc0)={0x77359400}) 17:06:45 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x801c581f, 0x0) 17:06:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') write$P9_RWALK(r0, 0x0, 0x0) 17:06:45 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:45 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x123001) 17:06:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000005c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000080)={0x0, 0x1b0000000, [0x8a7, 0x2, 0x8, 0x1, 0x3f, 0x10000]}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:45 executing program 3: getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000001140)) 17:06:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) 17:06:45 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045301, &(0x7f00000001c0)) 17:06:45 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 17:06:45 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x89a0, 0x0) 17:06:45 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f00000002c0)={{}, {0x10}}) 17:06:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x80108907, 0x0) 17:06:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@mcast2, @mcast2, @empty, 0x0, 0x5}) 17:06:45 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x1d8}, 0x0) 17:06:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x4, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x3b, 0x4}, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x40000) r4 = dup2(r2, r0) write$P9_RCLUNK(r3, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) 17:06:46 executing program 5: r0 = gettid() process_vm_readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/197, 0xc5}, {0x0}, {&(0x7f0000000340)=""/176, 0xb0}], 0x3, &(0x7f0000000980)=[{&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/131, 0x83}], 0x2, 0x0) 17:06:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f000000a4c0)=[{{&(0x7f00000066c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}}], 0x1, 0x0) 17:06:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 17:06:46 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)) 17:06:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:46 executing program 1: r0 = syz_io_uring_setup(0x5a99, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)) 17:06:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x50}}], 0x1, 0x0) 17:06:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) 17:06:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="0c21704d005584b072acdd936ed5afff", 0x10}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 17:06:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 17:06:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x37ff40, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10063, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:46 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000340)) 17:06:46 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0xffffffffffffffff) 17:06:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8901, 0x0) 17:06:46 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) sendmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a1", 0x1}], 0x1}}], 0x1, 0x0) 17:06:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8001}) [ 1238.331362][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.337687][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 17:06:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "9af378eaf1369b2bc73cc741a601a81e731cb5bd47fff4d1d7909b967fd9c7ed9dde458333f684d09b8994de73ccb8080743163aa55db7fa54a6e17801ac7e"}, 0x80, 0x0}}, {{&(0x7f00000010c0)=@isdn, 0x80, 0x0}}], 0x2, 0x0) 17:06:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001280)=""/220) 17:06:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/79) 17:06:46 executing program 1: socket(0xa, 0x2, 0x8) 17:06:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 17:06:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f00000000c0)={0x4, 0x6, 0x2, 0x5, 0x7f, 0x1f, 0x40, 0x9, 0x6, 0x8, 0x72, "208a7dd74e05a0e5831d820ce744a8ffb37a49a504afb00e93d5409fb04e74a2"}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:46 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) 17:06:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/79) 17:06:46 executing program 1: times(&(0x7f0000000200)) 17:06:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xffffff1b, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, 0x54}}, 0x0) [ 1238.825534][ T2721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1238.876145][ T2721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 17:06:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sendmmsg$unix(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f00000023c0)='\f', 0x1}], 0x1, &(0x7f00000082c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}}], 0x1, 0x0, &(0x7f0000001680)) 17:06:47 executing program 1: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={0x0}}, 0x0) 17:06:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/79) 17:06:47 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:47 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040), 0xc) 17:06:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/79) 17:06:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0x1f, 0x6, 0x7, 0x0, 0xa7, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x9, 0x943}, 0x2, 0x401, 0x4, 0x0, 0x6, 0x10000, 0x241, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x2) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 17:06:47 executing program 1: sync() ioprio_get$pid(0x1, 0x0) 17:06:47 executing program 5: socketpair(0x11, 0xa, 0xffffffff, 0x0) 17:06:47 executing program 2: unshare(0xe020400) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) 17:06:47 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xffffffffffffffcc}}, 0x0) 17:06:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x30}, [@RTA_FLOW={0x8}, @RTA_DST={0x8, 0x1, @dev}]}, 0x2c}}, 0x0) 17:06:47 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000002ac0), 0x6, 0x0) getuid() socket$unix(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002380)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:06:47 executing program 3: socket(0xa, 0x80003, 0x1) 17:06:47 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 17:06:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') sendfile(0xffffffffffffffff, r2, &(0x7f00000004c0)=0x3, 0x1) readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') r5 = openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x64083, 0x0, 0x9}, 0x18) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000200)=""/229, 0xe5}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000300)=""/113, 0x71}], 0x3, 0x8000, 0xfff) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r5, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x2, 0x7, 0x3f, 0x5, 0x0, 0x5, 0xc000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000500), 0x8}, 0x1007, 0x0, 0x9, 0x4, 0x8001, 0x80000001, 0x7c22, 0x0, 0x0, 0x0, 0x20}, r6, 0x7, r7, 0x8) 17:06:48 executing program 2: pselect6(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x6}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 17:06:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xf, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) 17:06:48 executing program 1: r0 = socket(0xa, 0x3, 0x7f) connect$netlink(r0, &(0x7f00000000c0)=@proc, 0xc) 17:06:48 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x9) 17:06:48 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140)=""/231) 17:06:48 executing program 3: clone(0x20242680, 0x0, 0x0, 0x0, 0x0) 17:06:48 executing program 5: socketpair(0xa, 0x3, 0x4, 0x0) 17:06:48 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 17:06:48 executing program 2: sync() r0 = getpgrp(0x0) ioprio_get$pid(0x2, r0) 17:06:48 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:06:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6}]}) 17:06:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x30}}, 0x0) 17:06:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@pppol2tp, &(0x7f0000000080)=0x80) 17:06:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) 17:06:48 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:48 executing program 3: clone(0x1040800, 0x0, 0x0, 0x0, 0x0) 17:06:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000017800)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:06:48 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044009) [ 1240.584316][ T25] audit: type=1326 audit(1631984808.753:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2805 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb832755739 code=0x0 17:06:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffd}}, 0x0) 17:06:48 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000003100)='ns/uts\x00') 17:06:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 17:06:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 17:06:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='*'], 0x28}}, 0x0) 17:06:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a003aaee163"], 0x18}}, 0x0) 17:06:49 executing program 0: socket(0x1, 0x0, 0xfffffffe) 17:06:49 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0xf0, 0x0, 0xffffffff, 0x208, 0x208, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@empty, @port, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "29c7cc902d3ff0a20d7c11ea9d2d295bea1e56737a57346d3b13e86675c0"}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@empty, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1_to_hsr\x00', 'bond_slave_1\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 17:06:49 executing program 5: clock_settime(0x280dd42f415a5388, 0x0) 17:06:49 executing program 1: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x3}, 0x0, 0x0) 17:06:49 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00'}, 0x37) 17:06:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) [ 1241.623376][ T2848] x_tables: duplicate underflow at hook 1 17:06:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9d) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040), 0x4) 17:06:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)="a949ee35dd8be736fe"}) 17:06:49 executing program 2: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x2}, &(0x7f0000000200)={0x5}, 0x0, &(0x7f00000002c0)={0x0}) 17:06:49 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:06:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) 17:06:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000001100)) 17:06:50 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:50 executing program 2: syz_genetlink_get_family_id$team(0xffffffffffffffff, 0xffffffffffffffff) 17:06:50 executing program 1: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x4}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 17:06:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 17:06:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 17:06:50 executing program 3: setresuid(0xee00, 0xee00, 0x0) 17:06:50 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 17:06:50 executing program 1: unshare(0xe020400) 17:06:50 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fork() syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/ipc\x00') 17:06:50 executing program 5: socket$unix(0x1, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1}, 0x0, &(0x7f00000000c0)={0x3f}, 0x0, 0x0) 17:06:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xeb0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0xeac, 0xe, 0x0, 0x1, [{0x31, 0x0, "ba5096b41a247a3747bd9f3b679b3a719d779d94a2a01da35571cc73f389a4971333c53c206cda97837b08ea98"}, {0x75, 0x0, "bc30221b90fcce6dbc9f6ca3130fe0dd7be4eeeb3f14121fab6c420104d5f1372344a8b2b0fc56fb634fbc3eeeae295ab2d0bcb1ec468a2221dca08f156ee1c1afa3e53237748412a0861832508e5638b34c043097d9b56e4e14609184925c24365448e2d8bd43f553617c1dff5eb02b9b"}, {0xdf9, 0x0, "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"}]}]}]}, 0xec4}}, 0x0) 17:06:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20004104, 0x0, 0x0) 17:06:51 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0xf0, 0x0, 0xffffffff, 0x208, 0x208, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@empty, @port, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "29c7cc902d3ff0a20d7c11ea9d2d295bea1e56737a57346d3b13e86675c0"}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ipv6header={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@empty, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1_to_hsr\x00', 'bond_slave_1\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 17:06:51 executing program 1: r0 = socket(0x2, 0x3, 0x80) recvmmsg$unix(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 17:06:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/68) 17:06:51 executing program 0: mq_unlink(&(0x7f00000004c0)='\xfb9\xb9I\x1e\\\x94\x87\xfbl\xab\x85\xce\xb3\xb5\xa7_\x8dA\x850\x04N\x19n\xe9\xa4\xaf\xd6\x8b\xef\xc49kg\x8dI\xc8\xbdQ\xf7\x00\x00\x00\x00\x00\x00\x00\x8dC<\xf0h\xad!X\x15\x86\xc0\x9c\xb2a\x9f\x1e\xc6\xa5J\x86\\/\x90G\fy\x7f\xf1\a\xc7\x9e\x04Xdh\nz0\x8eOZ\xb4\xebL\x0e\x82\xf8\xefG>\x01\xbc\x97\x02D\xef\xaf\xd1\xc9\x9a\xf8\xd4(y\xb2\x18\x89\xe1\x05\xff*\v<\x10ti\x92-03\xff`6\xea\xb8p\f$\xb8\x01\x01\x00\x00\x9a-\x89\x82\xe1w+D\x9f}\xfa\x8c~\x7fP\xc6w\xdd\x1a-\x10\xe5\xbb\f$\xaf[\xdd\xd2XD\xe7\xbc\x8b\xf7\xbd\xd5\xbb\x95\x1dF)\xec_\xfb=\xdb\xa9qP\x82\x15\xf0\x1czr\xb4\x8cJy\\ji\xff1.\xe8\xb9\xa24\xebp\xe0{V$\x11\x7f\xf8\xd0@\xfb\x03e\x1f_H\xaf:\x8cP0\x9b\xe6/(1\xf6\xeb\xf1\xc70\x00\x1a\x9e?i\xeb\xe8/\x96pA\x93\xbd\xa0\x10\n\xeb\xdb\xc5GR\xda=\x93m\xe3\x8a\\\x0e\x9e\x8b\x84K\x1b\x9d\xbfm\x85(\xc8\xae\xdb\xa6\xdc\xd7\xdei)\x181\xe0\x89\xbe\x89\x1f\x9a\x12\xe1\xaa\xccJ\xb0\x8d\xbd\x17\x038!\x9c\x8bL\xd8\xeb\x12\x83\xae\x1a\xd5\xc9\x97*r\xf8\x9f\xa6F\xd4\xfd!6\xca\xbc[\xac>\x12b\xc3\xcb\x89\x99\xb8X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a!7\x98\xec\xb71\x8b\x90\xcdUn\x9aT\xb7\x9aj{\xa2k8RGkZUlF\x99\xb3\xd4a\xb8\x82Um\xacl\xe3&\x01\x19\xc6\x0e8\xcb\xff\x88\x99\xe4\xc8\xe8\xd2[=\x81\x9f\xb2\xad+\xd2ny\x82\x13\xcc\xba\xaf\"G\xb8\x1d\x9e\x06Q\xfa\x945j&\xe1^\x00\xdc\xdf)A\xe9f\x9f\xc2\xd6\xa2\xd2}\x10\xb0\xfd\x12\n|%\xfe\xb7\xc5T~e\xb8\xd3_\x90\xdf\xf6n\x81\x90\xd9J\xdc\xf1\xc3\x04u\x18\x8e?*9\xd9\xc6\xb4\x90\xbb\xa1+\x8a\x1b37\x81\xc4\xe8\x94\xdc\xe4\x85\x93\xcf\xeaQ\x9f\xff\xa4\xcc\"Z\xff\x8e\x93r\x11\xef\xa0\x06\xce\xe5C\xe1\xe2CV\x10`\xec\xe6\xc3\x0e\xf9L\x14\xeb\xb4\xbb\xd8QI5j\xb9\x15kJ\xef\xa6\x0f\x7f:\x18\"z\x13\xd2\xfe/2\xcb,\'\xc9\xa2u\xe2WQ\xfa\x85,#3)\xf2\x96@\x8f\xce_\xb4\xbd\n(\x9f{\x9d\xe8Y\xd1\xec\xff\xd5B`\xb6\xd3\xc1\x18\xf6\xef\\b\x1e\xad\xa1E\xb3\xc1\xb8pY\xbeHE-s\xa9`!\xc3\xb9\xc1\x01T\xcf\xd0?o\vv\xa0[#%\xb7^\x05\x88\xde\xee\'\x10\xde\x18\x016}\xe1\xeb+\xbd\xa9\x9d\xde3\xf3\x1f\x1d\x87\v\xacH@\xa5\xbb*\x9f$=*\xa9k\x00\x8d\x04\x8f\xc9=\xb9\x19\xaa`#b\x8e\xef\x88f\xeb\xb1\xb0') 17:06:51 executing program 3: clone(0x8800000, 0x0, 0x0, 0x0, 0x0) [ 1243.647481][ T2908] x_tables: duplicate underflow at hook 1 17:06:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20048000, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17:06:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffce7}}, 0x0) 17:06:51 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setregid(0x0, 0x0) 17:06:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001180)=""/4096, &(0x7f0000000000)=0x1000) 17:06:52 executing program 2: r0 = getpgrp(0x0) tkill(r0, 0xfffffffe) 17:06:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f00000000c0)) 17:06:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:52 executing program 1: fanotify_mark(0xffffffffffffffff, 0x1bb94ee94b2e5d18, 0x0, 0xffffffffffffffff, 0x0) 17:06:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') 17:06:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) 17:06:52 executing program 2: pipe2(&(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000c80), 0x0, &(0x7f0000000d00)={0x8}, &(0x7f0000000d40), 0x0) 17:06:52 executing program 5: socket(0x10, 0x2, 0x81) 17:06:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/50) 17:06:52 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="02050000030000000000000000400000af"], 0x18}}, 0x0) 17:06:52 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:06:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:52 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000580)='ns/ipc\x00') 17:06:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x201}, 0x14}}, 0x0) 17:06:52 executing program 1: clone(0x604d500, 0x0, 0x0, 0x0, 0x0) 17:06:52 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xffffffffffffff43) 17:06:52 executing program 0: pselect6(0xfffffed2, &(0x7f0000000c80), 0x0, &(0x7f0000000d00), &(0x7f0000000d40), 0x0) 17:06:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000008a00)=[{{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f00000023c0)='\f', 0x1}, {&(0x7f0000002480)="12", 0x1}], 0x2, &(0x7f00000082c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000008940)=[{0x0}, {0x0}, {&(0x7f00000084c0)="03", 0x1}], 0x3}}], 0x2, 0x0) 17:06:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:52 executing program 1: clone(0x80600, 0x0, 0x0, 0x0, 0x0) 17:06:52 executing program 2: r0 = getpgid(0x0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) 17:06:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) 17:06:52 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='.\x00'}, 0x10) 17:06:52 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x9d) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 17:06:52 executing program 0: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 17:06:52 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:52 executing program 2: io_setup(0x2, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000040)=0x0) io_destroy(r0) 17:06:52 executing program 1: io_setup(0xffff, &(0x7f0000000140)) 17:06:53 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 17:06:53 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 17:06:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010140) 17:06:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffffe, 0x0) 17:06:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:06:53 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 17:06:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_sec_ctx={0x1}]}, 0x20}}, 0x0) 17:06:53 executing program 0: r0 = socket(0xa, 0x3, 0x7f) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 17:06:53 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 17:06:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000008a00)=[{{&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f00000023c0)='\f', 0x1}, {&(0x7f0000002480)="12", 0x1}], 0x2, &(0x7f00000082c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000008940)=[{0x0}, {&(0x7f0000008440)="8b", 0x1}, {&(0x7f00000084c0)="03", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x2, 0x0) 17:06:53 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000280)=')(\xb5\x8c]\'!&/*^-@-,@-[^\x00') 17:06:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:53 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x187300) 17:06:53 executing program 2: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sysinfo(&(0x7f0000000000)=""/75) 17:06:53 executing program 5: io_setup(0x2, &(0x7f00000000c0)) io_setup(0xffff, &(0x7f0000000140)) 17:06:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)="91bb2d67", 0x4) 17:06:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffd) 17:06:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 17:06:53 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0), 0x101, 0x185001) 17:06:53 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:53 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 17:06:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000007640)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000048c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) 17:06:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockname$unix(r0, &(0x7f00000016c0), &(0x7f0000000000)=0x6e) 17:06:53 executing program 0: r0 = socket(0xa, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 17:06:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000970373"], 0x3c}}, 0x0) 17:06:54 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$apparmor_current(r0, 0x0, 0xc) 17:06:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x14, 0x138, 0x1, 0x0, 0x0, "", [@generic='C']}, 0x14}], 0x1}, 0x0) 17:06:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9d) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xfff}, 0x4) 17:06:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:54 executing program 0: r0 = socket(0xa, 0x3, 0x7f) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 17:06:54 executing program 5: unlink(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x20) 17:06:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000a0000000400000000000001000000006400b81a"], &(0x7f0000001d80)=""/207, 0x62, 0xcf, 0x1}, 0x20) 17:06:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000049c0)="3be6c939574face16bd04368890a7650b258a781a2c9597583826dbc8a5e8c7c4ede96a2001f0ccd6b8026f81412e933907163b4fd543228409ec625353f60572dab055657065e369eb2a43dd182cf3da95ed0b3caa8d28a0044a984970ec914ca65b796d7ae652901e2d5cba4aec07de1dc0c617be537c5db9c135d04b788d10037c7b5d631c93d55619b2b057ea115b94e21df723a60b2d610bba78a8cf7a34ce64a3d007fe340f8f1ffbbaf9d87516446fb08771b621554d36f5562e0d475b1f3d45c0e74782d6d8adc05731c890b952c34e5e5c7f4c435b7c5373ea36c3c0e", 0xe1}, {&(0x7f0000000400)="f86222ba7796d563cbbfe9bd3f9645cd458177032d334cf2f53b5c46423fb42bb5b5947e022b208959be3c9ff7f941bed68bf15dbc704c3e8f5121d96c53de5e524ec9f246edd5c7027dffcfa73596b8557b365334bcd5c8aa3896fd55787d2873787903f051c0edd0db7c34dab3ff418feb61eb1630b544116b0d8cf38019cd6d294894ae4417b5d8a2189bd8265a227656bc26f3cffe8630a3dcd9860dc519a6db754e3876df0a008fb74fc464f1ed", 0xb0}, {&(0x7f00000004c0)="d7f6d7ff0508020c52d75cc6d3711af7d70f2445e7285f6ee8e6398f3c56c07f622a3156d3bd3a86e24c18374a26619dd54df32547661da6ecad900813d9cf50d21ff734e718927f9fe1e37c4fe56e47b384dd878d13241652db36e92642dc6856a31db177e249d1036baba06fd3eaaf59c48ba1c51a30d12ba8cefdbe092f47ec6d47cc54fbd9cdee0273a466627281b63f4c4468f73f8b03eb440b9111d068b56d34d685cef61bcc5c939d157fb129fa1dfe44a2d250aabe5e65bbbcb81aa4ec56913bcdccbc5a993f4f88bbbfe59a01bc97c79fcb", 0xd6}, {&(0x7f00000005c0)="a2", 0x1}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0xfa}, {&(0x7f0000000300)="6a2dd6d8d7d36ebaabb258789af1d2feb39b1a91ae6ef8c26ac32bdf1bfe347ec0d5f2f6205b58f26a703209b5262615916a7967b84a6a68873ac80080dd89aa26faff36aa7d3abe852bf6276dbfcab791c3", 0x52}, {&(0x7f0000001780)="5c4a8423d335649a5f0f8ed85b6c47dcecac7df83608fcb84cbfcf75ff99fd432d43fc4a1148152741d3f648afba1f72886bcb4726e87003989568c6473e7ea291c49f4bdae8091763f3f3f5f5fd0af94fc247d3cf78758b92aef30c6648fa716d967f9ca2098423cd2931077ac8754abf889578ab41786fc54ff5e28dd82443", 0x80}, {&(0x7f0000001800)="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", 0xa8d}], 0x9}, 0x0) 17:06:54 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x9, 0x0) 17:06:54 executing program 0: fork() waitid(0x0, 0x0, 0x0, 0x1000005, 0x0) 17:06:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x24, 0x48, 0xefdd20e69b76c23d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 17:06:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x8d, 0x7, 0xc7bd, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x40) unlink(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) 17:06:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="0e", 0x1}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:06:54 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 17:06:54 executing program 0: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x89) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001800), 0x10) 17:06:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x8}, 0x40) 17:06:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x318dfc8d91dd8915, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:54 executing program 2: socketpair(0x23, 0x2, 0x0, &(0x7f0000000080)) 17:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 17:06:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x78) 17:06:54 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x0) 17:06:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 17:06:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf4240, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x61, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:54 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) 17:06:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xbca}, 0x40) 17:06:55 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x40) 17:06:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb}, 0x40) 17:06:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 17:06:55 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40), 0x10) 17:06:55 executing program 1: unlink(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00'}, 0x10) 17:06:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/201, 0x27, 0xc9, 0x1}, 0x20) 17:06:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) 17:06:55 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r0, &(0x7f00000071c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000003a00)='h', 0x1}], 0x1}, 0x24008880) 17:06:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:55 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 17:06:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x1}, {0x2}, {0xf, 0x1}]}]}}, &(0x7f0000000300)=""/213, 0x46, 0xd5, 0x1}, 0x20) 17:06:55 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:06:55 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000004040)={&(0x7f0000002b00), 0x10, 0x0}, 0x0) 17:06:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x4000}, 0x40) 17:06:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x89e1, 0xffffffffffffffff) 17:06:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:06:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@rights={{0x10}}], 0x10}, 0x0) 17:06:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x7ffff, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:56 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 17:06:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, &(0x7f0000000080)=""/213, 0x2a, 0xd5, 0x80000001}, 0x20) 17:06:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:56 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x50040, 0x0) 17:06:56 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@cgroup, 0xffffffffffffffff, 0x4}, 0x10) 17:06:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x4, 0x0, 0x0, 0x0, 0x0, 0x85}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:56 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000080)=""/213, 0x36, 0xd5, 0x8}, 0x20) 17:06:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:06:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 17:06:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002540)={&(0x7f0000000300)=@tipc, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001540)=""/4096, 0x1000}, 0x0) sendmsg$inet(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002b40)="d76fcbc8d005c88cfddfc5f99d1c1fd017534141ecdfd850bf5776ae0b021f9b2042f62ca8b04b2eb8bb82097a58ec0477569e534d17f90de786665a9e0f6e53803735b43a485d9a5eb936e7c15e", 0x4e}, {&(0x7f0000002bc0)="ed8b1b8a41649d2e86672f93ce00c679b62fce3993b8c9fc84f73dc6615cb1b0af8f79b8dda58558a11b25085b7291d079ec5f32ec1f26b500535d904736d240e9315d91d4aa8441f3fb076014443300c2c4d29349a5a8e7a0e5e9340d360ac5c0408ca637", 0x65}, {&(0x7f0000002c40)="adf9d548b70aba0a1f192671e286dd5cca804228e57bc8388366756bff4194a6b0cda04180175a167715cf1f9489d913f3aaa242c18408adafc920eeaeaff815be8d39b5cd409cdb1d7c5816254caf893784efb919cfd4d1fe0f707dea33ff4871495025f0d546731a284d50caae60f94535d0673223c5d697974a241455bdd6af42e543e416cc98d7d535504ce04b6436f624e82b826fbab60bc6e9142690604638ca4d8e4f61bbfd38d05235f1e9a2315dde5d8164473bb6b0287ec71124", 0xbf}, {&(0x7f0000002d00)="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", 0xe8f}], 0x4}, 0x0) 17:06:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f0000001540)) 17:06:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 17:06:57 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 17:06:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000004700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) 17:06:57 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f00000015c0)={0x0}, 0x10) 17:06:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x114, 0xffffffffffffffff, 0x4}, 0x40) 17:06:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x41) 17:06:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:57 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000240)=""/201, 0x28, 0xc9, 0x1}, 0x20) 17:06:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x37}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 17:06:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 17:06:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40002040) 17:06:57 executing program 0: perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:06:57 executing program 2: socketpair(0x2a, 0x2, 0x0, &(0x7f0000006c00)) 17:06:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000140)=""/136, 0x2c, 0x88, 0x3}, 0x20) 17:06:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x7, 0x0, 0x0, 0x2}, 0x40) 17:06:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa501, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x78) 17:06:57 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) 17:06:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x61}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001a240)={0x11, 0x8, &(0x7f000001a040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @func, @jmp, @map]}, &(0x7f000001a0c0)='syzkaller\x00', 0x3, 0xa8, &(0x7f000001a100)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x40) 17:06:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000025240)={&(0x7f0000024200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000024240)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 17:06:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x4000000}]}}, &(0x7f0000000080)=""/162, 0x26, 0xa2, 0x1}, 0x20) 17:06:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0xd}, 0x40) 17:06:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c00}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000025240)={&(0x7f0000024200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000024240)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 17:06:58 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x4400, 0x0) 17:06:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000008b00)={0x7, 0x0, 0x0, 0x0, 0x822, 0x1}, 0x40) 17:06:58 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)={&(0x7f0000001540)='./file1\x00'}, 0x10) 17:06:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x8, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:58 executing program 0: perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:06:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000009940)={0x0, 0x0, &(0x7f0000009840)=[{&(0x7f0000009740)=""/193, 0xc1}], 0x1}, 0x41) 17:06:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000300)=""/213, 0x26, 0xd5, 0x1}, 0x20) 17:06:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x17, 0x0, 0x3, 0x8}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 17:06:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:58 executing program 3: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000180)={'vlan0\x00', @link_local}) 17:06:58 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280), 0x91) 17:06:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)={0x12, 0x1, 0x0, 0x9, 0x0, 0x1}, 0x40) 17:06:58 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 17:06:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x17, 0x0, 0x3, 0x8}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={r0, 0x28, &(0x7f0000001c00)}, 0x10) 17:06:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8}, 0x40) 17:06:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x2, &(0x7f0000000cc0)=@raw=[@btf_id], &(0x7f0000000d00)='GPL\x00', 0xbe61, 0xf3, &(0x7f0000000d40)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:58 executing program 2: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'netdevsim0\x00', @random}) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') 17:06:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:58 executing program 5: getpid() perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) gettid() 17:06:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x153) 17:06:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000140)=""/136, 0x2c, 0x88, 0x3}, 0x20) 17:06:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000f80)={0x17, 0x0, 0x8, 0xffffffff, 0x1008}, 0x40) 17:06:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000080)=""/213, 0x27, 0xd5, 0x1}, 0x20) 17:06:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x30, &(0x7f00000000c0)=""/48, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0x10, 0x11, 0x7}, 0x10}, 0x78) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) 17:06:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000009140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)='9', 0x1}], 0x1, &(0x7f0000009000)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 17:06:59 executing program 2: perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:06:59 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001280)={&(0x7f0000001880), 0x80, &(0x7f0000000080), 0x54}, 0x0) 17:06:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0) 17:06:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x1ab715b6}, 0x40) 17:06:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7a, 0x2}]}}, &(0x7f00000000c0)=""/170, 0x2a, 0xaa, 0x1}, 0x20) 17:06:59 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:06:59 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:06:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="bb", 0x1}], 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4101, 0x1005}], 0x1}, 0x840) 17:06:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000012c0)="32dab79be24eab9d30b2535396abbe280044463b7568dc954301737b2f33687e0d5684787969fdaa0deee049ae350afeca3081fa1f349f7c9fc8632c6d25cfc4b90e106856ab774eb317ca573c3289e08434efa7a5f7347a8062a012ae8a8b8b2021a49431189bb86e29ea1d17a77b10feefa94f16c25a0487c2bd0c476cb88b0b09d55e2114d20cc600ed374c9bbd58be", 0x91}], 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4101, 0x1005}], 0x1}, 0x840) dup2(r2, r0) 17:06:59 executing program 1: shmctl$IPC_SET(0x0, 0x1, 0xfffffffffffffffe) 17:06:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="92", 0x1}], 0x4}, 0x0) 17:07:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}, {&(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x1}], 0x10000000000000f7}, 0x0) 17:07:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="bb", 0x1}], 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000032c0)=""/4102, 0x1006}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x2}, 0x840) 17:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETGROUP(r0, 0x5421, 0xffffffffffffffff) 17:07:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4101, 0x1005}], 0x1}, 0x840) 17:07:00 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x27, 0x0, 0x8, 0x0, 0x2}, 0x0) 17:07:00 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x408, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b) recvfrom$unix(r1, 0x0, 0xfd0b, 0x0, 0x0, 0x0) 17:07:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="bb", 0x1}], 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000032c0)=""/4102, 0x1006}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x2}, 0x840) dup2(r1, r0) 17:07:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000012c0)="32dab79be24eab9d30b2535396abbe280044463b7568dc954301737b2f33687e0d5684787969fdaa0deee049ae350afeca3081fa1f349f7c9fc8632c6d25cfc4b90e106856ab774eb317ca573c3289e08434efa7a5f7347a8062a012ae8a8b8b2021a49431189bb86e29ea1d17a77b10feefa94f16c25a0487c2bd0c476cb88b0b09d55e2114d20cc600ed374c9bbd58be7c83c26474abae97e4c4e341761103485cbf6627fb3a223d82b85756e618d2f227a5980f64619530f2b1b8f0fc3b1d203cd030ac7afdcd9958432603af95b32e6d4826a26ffcf6270a3ef142d1cdabc2567187bdd89af9f94bc419b0f181df", 0xf0}, {&(0x7f0000000140)="ae8597296813b86532393fa362296f570aa18515b4901f9282eca20fdcef81c6cf57e70d6e8ea627d67cd0fb1bfbac8efa83836370ef1237700efb94647d735e00df2ea78062a9822aebdc12", 0x4c}, {&(0x7f00000013c0)="17db77466c6e86abf554fb164ec85b30ae9058ebfb8c70efb664ce858cea6c496adf4291ed21298a2d638e17a74d30b651293f1893", 0x35}], 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4101, 0x1005}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:07:00 executing program 2: setreuid(0x0, 0xee00) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) 17:07:00 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x5451, 0x0) 17:07:00 executing program 1: setreuid(0x0, 0xee00) syz_io_uring_setup(0x7bc7, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:07:00 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 17:07:00 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:00 executing program 2: socket(0x10, 0x3, 0x47f1) 17:07:00 executing program 0: setreuid(0x0, 0xee00) setresuid(0xee01, 0xffffffffffffffff, 0x0) 17:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f000003c940)={&(0x7f000003c780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000003c900)={&(0x7f000003c800)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 17:07:00 executing program 1: setreuid(0x0, 0xee00) syz_open_procfs$namespace(0x0, &(0x7f0000002ac0)='ns/pid_for_children\x00') 17:07:00 executing program 2: socketpair(0x11, 0x3, 0x5, &(0x7f00000001c0)) 17:07:00 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x6, 0x0, 0x0, 0xffffffffffffffe2, 0x322, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}) 17:07:00 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x2, 0x1ffff000) 17:07:00 executing program 5: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 17:07:00 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0) write$eventfd(r0, 0x0, 0x0) 17:07:00 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2401) 17:07:01 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:01 executing program 3: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x220f00) 17:07:01 executing program 0: timer_create(0x7, 0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) 17:07:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\"='], 0x24}}, 0x0) 17:07:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]}) 17:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 17:07:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 17:07:01 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x5421, 0x1ffff000) 17:07:01 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x620083, 0x0) 17:07:01 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000003, 0x0) [ 1253.115709][ T25] audit: type=1326 audit(1631984821.284:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3423 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e88d7d739 code=0x0 17:07:01 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:01 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x5421, 0x0) 17:07:01 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x2, 0x0) 17:07:01 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x0, 0x0) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) 17:07:01 executing program 1: syz_open_dev$rtc(&(0x7f0000000180), 0x0, 0x20280) 17:07:01 executing program 5: setreuid(0x0, 0xee00) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x200082) 17:07:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f000003c940)={0x0, 0x0, 0x0}, 0x0) 17:07:01 executing program 0: clone3(&(0x7f0000000300)={0x15040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 17:07:02 executing program 3: eventfd2(0x0, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000200)=""/221) 17:07:02 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) 17:07:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x64}, {0x6}]}) 17:07:02 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="1c314bc3e9187b3647e398"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) 17:07:02 executing program 5: setreuid(0x0, 0xee00) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) setresuid(r0, r0, 0x0) 17:07:02 executing program 0: clone3(&(0x7f00000002c0)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1254.101384][ T25] audit: type=1326 audit(1631984822.274:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb832755739 code=0x0 [ 1254.131023][ T3463] ptrace attach of "/root/syz-executor.0"[3460] was attempted by "/root/syz-executor.0"[3463] 17:07:02 executing program 2: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000480)) 17:07:02 executing program 5: syz_open_dev$sg(&(0x7f000001d540), 0x0, 0x800) 17:07:02 executing program 1: syz_open_dev$sg(&(0x7f000001d540), 0x0, 0x0) 17:07:02 executing program 3: timer_create(0x7, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 17:07:02 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:02 executing program 0: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 17:07:02 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000012c0)={{0x0, 0x3938700}}, &(0x7f0000001300)) 17:07:02 executing program 5: setreuid(0x0, 0xee00) getresuid(&(0x7f0000000400), &(0x7f00000003c0), &(0x7f0000000380)=0x0) setreuid(r0, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0x0) 17:07:02 executing program 1: setreuid(0x0, 0xee00) syz_io_uring_setup(0x4cc2, &(0x7f0000000600)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000044c0), &(0x7f0000004500)) 17:07:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x2, 0x0, 0x20, 0x7}, {0x6, 0x0, 0x0, 0x150}]}) 17:07:02 executing program 5: clone3(&(0x7f0000000340)={0x40000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:02 executing program 0: prctl$PR_SET_THP_DISABLE(0x29, 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:07:02 executing program 2: setreuid(0x0, 0xee00) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1254.642591][ T25] audit: type=1326 audit(1631984822.814:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3494 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c7c77739 code=0x0 17:07:02 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0x5460, 0x0) 17:07:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30a9"], 0x44}}, 0x0) 17:07:03 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x182) 17:07:03 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:03 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000680), &(0x7f00000006c0)=0x4) 17:07:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x100}}}}, [@NL80211_ATTR_NAN_FUNC={0x2ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xeead721}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2c5c45e013b9"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0x270, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "86f2f5a6da444df81c704c06e981b2fbed3be8df57f22ddfecf2184830327533c45590f536efcb19b2dede66d6af708550f7acbf9391347862bd340fd88bedf7d615feadec5650e1c8c534ce06b2c4c65a7c4e2ecdf950abbef2b5f14c279bac908cdc6a2e5d28b73f3447f6184e6fd0b5c30feb403042ece2213248525784e08b93704d9d851c93c904adf3f1b58612497b81fbfeed52b6f7a9d7bf8f1b72281160b1378c955fb26c8276190070a89a86f83c7433b4855015603194fe6a38657d96d43cb87d8be60223f0294bb5dceb02503f79374c30062f788fdf68c61ac2b49ed3634f50d0a1edabd72b9da75ef89a83c960cb72c026e669ad4c57e7ec"}]}]}, @NL80211_ATTR_NAN_FUNC={0x1b8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SRF={0xc8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xbd, 0xb, "93682e59b872cfe9ff1bd46996f6e1607e22a3482baf058ad07f0efd10e690e9d135224cd2950e73f28be7e9267d209f39a4801a7a7ad518dae7b0aba23a0277977ac7c73609adce59d939af3bb3cfdc194018fb6f277ee835235d4c82026d2248a94e4fd115205e0c52bb71cbe5182ec6e67c5782732dbbb7ed31f954ddbb96f7497c7958ba7514d52ca6e9cd771e15147854455e5a85dbf709e9174c4e18b5dd3ab9935f0d6c2da34f654ff1570627963123cada7a475990"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6cdf1dcea494"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dd738fac77f3"}]}, @NL80211_ATTR_NAN_FUNC={0x9f0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x9d8, 0xd, 0x0, 0x1, [{0xf5, 0x0, "732f8f4b1bf3f4eaa1bb7b1ca7aaaaa1736d54ff934b0411c9556a0bd956b9db402f8b7ad4c3075d9c07612d3f358c2ecd73c53400e35b000e5ac14a8ec0c1842f50d8172e6bb166d155a7c53fcf7594621e59d43fae023e9796770cc3630b51dd55a2f99a02a897d35f4fb5586a5fd27390d3afc708605bdd663e21e282d4cfc75e8e4bc4854b8dd314bb5fcf04d901edeb182c8b8a344cb8445940f7c3478bdad08761a4e4f0c1e4f4a5e70e1edc6092b8cd6f2ef9907394f1534c4e88b353324ab5d73f597885c0bb974abe5d8a908e89c13bb00eccf35c5bbcd80754a6fb3d7ee9ed165e87fd7cdeecc145dbe75658"}, {0xb1, 0x0, "69c99845d71e77b6c4630721b6f0573b3003ae78267f3a72c94bce76c3d05345f12de32b752c6fbae90090842b8ee42fe81a395041aba54b48ea8f3c4acef51be0f86a745ee77582f29dea61dbf38eb9552ae90d7696b425b6a2e4ae727b605a1ab7f1a1d5b6c34fb6067e33547c21114310b289225ff5e9e12bf117f92314157c7dafae460060faa462490a0a9a77fe110d29373f77d01d36a4ace09ea64634acca75083818ac520646233595"}, {0xad, 0x0, "c59715b2c2a860b9a0b603b826581e7c9be2d7e062fb98f68a0249e986b305876a1dfa361cffd26846c2091c9db4fe61b8c581610aaba2456bc47bcf101b382100ab2127f9abad22d3af0cb7f0d8ce560c051d256315abb8f317d2d4e5cc386e2cc5c3671011067e9a4aa1c527d45119e2a1caf96a05344e8bd04b3e3b5ce07f25e46152f6917ee675ccd992e47e620ec8acdd5dc40d30c703cbf646e9c5bc1e8724405cb39dc5ad53"}, {0x775, 0x0, "2ea114432fe41629d274fa8e6f5444bc726dbe7d616df02973d233e7c826220d661c94fcb5afc5225b7c91cde61b72188510dc8535ed2972d50f3f0a7dd2fe2068eb81ce3792a166f584f8cd11f89b7e1f1dce77e821e668657d0ad4157e9b36ec22d25a79bd1486b55c9a510561bd2b7dcb503a4140356f28c93aca5149e2916cc58b007d0bebc731f692878f682b87121c1895853b0b988d5e984f05035cd47d7b41a2e56f84867daa3553f1a8b1bdc3fcf3133b02c3a864856245cb65596129c279144c1a63445034728afb3ead950db12c602783fb93be0fc681590a2eb83c3cfdecb5f9f2cefccf62e2371ae1fa40fa89f2b8441a662e8e6bd2a5afb35e01f5a69bf72017a5e7634439d5a2cde90555204eb6f92fe59f96444dd4608128e7e8992e374a6e81ad9f611717b0405c5da8c83a47fd99555ea54a87e9c713dd8ce3f85108288b13d3b102cdc3d3fde82ede8136f3ee358615670059272baf8d20f5d391c79e27649cb9f92be5588e4ec00e82c8435ae9069dae7fae6682de6ddac3ccb135e6a27e793263b1c963560bc8ac3d5c1db3af98a8d09cd9bc3b32a0904a35c4e78b812fcd22c514aca45907991490f3648dcf3d2733adee7a49c72e59a5d3d476379aba3266cf4ccc7f6ae0cb47bcaf304cedcb8a133e8f28af3c0e4dd2328e6ad32641ff838a9692744350b8e75d25e561a615a2acdc1ad310e838074517af56cef0d359466040b871e7228bc7b90dac0927964031040a61a9f4e6cba71f1ab9bb2e7e7070e182893041014ecb49ec24c9c954f67979f3fb96134e240a8525fe552e61592a9c9070af833264b0245404a6ee3867b54b7597fe602b8a4221b11b0a1707fb0ff66fae6ce722fade7234feb8c89b37cfa0c1510866f56a550a3777097d44822e7c66cad99a637eb649019f5e59788eb93de184c784bef64a7a75eebf1aa41ca19daed158ba52bd5ec21de5cef3e6acd8f7da9348db452a6b6e0ab17914849ac184b34f387444faaadf1514aba6c2846c312195ae11d7a6574739ba1c131ec21d9bcdf753374f2a6567b7c9766bb49f97d28f9aee49c0cbfa8942946ae723bfd7ffcdc385ceab35fb5953b21a765458bc8c2ca511d210e405db05280f4e77cab2bb00480e3f0197f707479eb44fec8e37f23a8cb8e87d3d4cb8ffe51698c524595cb00ddd905348aefd3d6a19bb5defc5fd4140230e85270a4c1c751c4bd59bacee201864e76681aa91d8aa4aefb79d3f5dcad02f94cf0b930daa7f6d39753a98e6b8729264c39d33905235105edceacdb5662ddeb627477607512a2a712d29908701b481b0b39d78806e6323462f0c1dfac4d981e5da4891f089bc0d338fa0a603dc3322969c54ac33b2649a7fb1331970eb352da54f08c65c15fcb72a20f5e81efa85ecbad983e3b364ed6ab4bcee5ef757092af3c89a602a4f434ba639d764ac7e34f3f6e2d45bedeed064a70f576cc679168ab3285109d0cf8b4cd4a9bb270858ab10f29e57a1b40c5115dbd88b0841e3af851c8cd4c986721ac4f64f7018cd84afd008a1649b719e618b2b3a7101732fc1f6169899605d530c5bec15a34f05b5b32746994ce118f8269cb38b07a0b64fca0c4bb20da0c54a94d8c95f287ec1e6fb1131e39a557f327348c12fefb38ce24e85e088ce22598ea86471b707875e2615b0101bd86ccb0cf71862d9e274061eff15ad3af6be299b787b2b413f028ca830c1a4dfb8bac5ef4184a86a5f416755e4991701f25fe4aabbe2df02e0b0803bc4d091240651c8fb73562fb8d932c9a2c209abb124fd59a223080ed15d8b0dc8afc37db1275c7e101d37325211ce3f3fc70f39214e43659e67e4e942d0db2015b28bceadd2301fe57b320f5916ed499e07bce798f59edb6f2865339df627d63937e7d547f23b814fe8867995e642a86773f891d39bedde060849afeb1271ce36b490a24b93f2b40f6d83af45d12f7babc786382a9e28e6400874147e3dc3a0ff5d090ee2aa14e863ffe4c557961ab94e9ee38e6f2f535464490b0de6884b649ac0dfd82936cb60c3a863c1607c04c99e4a233538262488402942edfe85d1941e83e77b2ee58797d4e66833c8809ccd5dd8c590af72c665455c7bfae30346f9dae7495db43482b21abb19bec9cf9516ad197af7d99b0ea2f225e583584960337e2472bd482aa46cbcc669381aee5850e74a949dc54317e63a1d50c7d2f815ab73615dab8ecd81f5ca38e7961c5b41c6564357dbd7742f451b9ca552044134e7ce8bc2966a7ca903c8dadd2121fced7edf642baf6fa71c8bc49a8fc050fa93c1dc5b6adb652f89dcae6baf580658d8ebe5c168b8f35463c2405c422c6b6dda8827bbb9248fcc53343855e34d9f877fa650857a96e2ac31860328f5333570649f691fa785f30aa1f1b5f075467fe7fc7b2690d777728a941e6c1e957864b082ba7cc690bd82193e1daeddddcdf49e3b205e2ace9a89cfaad22badafc75b474283c86e0aa82b04f2f8d88d1daae9968f28485fc8d12bd78d105a7e2cd1c5502ebc2b5e2a96cf45661a9a0a88be66cc4f7f3393d1adb3075340e538f1ab771d7b0180a9ee745680090628bfc6bb2613606b8f0c795e9eedb22cb0ad17e976ccdc7c8b26d47ce1283c2bb972cc5e2b370bd7aad83674ba68d54b26d1e8ae7ead09b62ea2e1dcd6cc"}]}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}]}]}, 0xec4}}, 0x0) 17:07:03 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 17:07:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:07:03 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 17:07:03 executing program 5: setuid(0xffffffffffffffff) r0 = semget(0x3, 0x0, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 17:07:03 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="42744a9e3f", 0x5}], 0x1}, 0x0) 17:07:03 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x9) 17:07:03 executing program 2: semop(0x0, &(0x7f0000000240)=[{0x0, 0x1ff, 0x3800}], 0x1) 17:07:03 executing program 0: clone3(&(0x7f0000000300)={0x15041100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:07:03 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, 0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:03 executing program 2: lchown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) 17:07:03 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) 17:07:03 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), 0x2) 17:07:03 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040), 0x4) 17:07:03 executing program 5: getrlimit(0xf, 0x0) 17:07:03 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, 0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:03 executing program 0: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9) 17:07:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x20a, 0x0) close(r0) 17:07:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 17:07:03 executing program 2: setrlimit(0x7, &(0x7f0000000000)={0x801, 0x10001}) 17:07:03 executing program 1: getgroups(0x7, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) setregid(r0, 0xffffffffffffffff) 17:07:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x40) shutdown(r0, 0x2) 17:07:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1, 0x0) 17:07:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0) 17:07:04 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f00000026c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000002600)=[{&(0x7f00000000c0)="54c06bbfa5f7b997005ab8d05fc7ae7ed7dccbfe3f549fee22b4c19d8c736197e0b1e70cd56e4c825ac498436267c3bd29976451242cd0c120316fa47af02aba3faab37211a7d2ee2d0087fafc1b587fa099024422fa09da36460972bef0b073f912198f2c72c82be8380ddbbafcf5a7a4843b7d75f85c52c9c8b2452b1306e71af7074ab4669ba0343c4259bf734c4ee7605a6146c056", 0x97}, {&(0x7f0000000180)="dd236a4b8ec858d1dd713dddd2052cbb380ad8f1bfb32c96a24af1310ed1207ac25761daf625a303d554eb29faf97bdd5efb6d16899506404e1ae137a492a1c6368ac84fecb832c336d8683baa90e74d27c149c4ae6919a48ac7be842b3c1f74e668cf07b3760962fb4d3cc5d0d320991f60265a2584ba5843ab136aefb8e3898a2210c15b5007464fb31bc13a964ba5b3b6b2cd20aa47043630ad6088007fda33168148c9e100f85afbe820df4bb33bdb233d230e39ffa263f83af98f532818a95398336d135d8aea9ba5bbc5686a330f5123f5e8f8e8787251092b98ecd1306531317232d8162782b8ba05c78ee7f4131d", 0xf2}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000380)="5c6f7a78a6e48bc6e7c056998d0d973d3d410d4000ace0f3943abcfe12af027a31215356818347892b814bfd2e6b882c", 0x30}, {&(0x7f00000003c0)="330796038731bcedf6c8930c3291825384c770a2e489196a54df4de84e47acff1f4d0559cf72c59f0e297305aaf05da8d57b8aa6ac7f05742823a97c116c5abdd0875608a116181dc42a19ce5104a54411b8350380fb47dc20a11de8dcb30754e53c9caa677f002a7ca1957f148328e2e73fe548d8bc523022d71fb059d6327d857ab0afedf6d9b53ed1f7209ab382017a353ed8b027cfd26881251e861ee644e98fa707c118274fd933de915e75bb3d167573dfab75193804f9ca7697ba", 0xbe}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="0d948c36153c7852b722fd", 0xb}, {&(0x7f00000014c0)="2e10fd0c5270b503f173698264af89ae755ffbbd7db53da26b42efc92444f46003a766b6c6846e1ea392dfc82b0ad335004f3039dcff92e31640fabdd994b72536cd8d11d9e76be6a9780057becf13ac07f0756ab9fa4ba6564f43cafb842818cc9a39521789db42e022309a52405e26c06d4a80d5ad067ee6e31092597c66bc7d93395e15bbd51b3b2427c938fa550932c79591eea0f8b95f532e471cf2d270340d31670c6f558ae7c3e9fc9b815ca01261e49b1b7e0395eb", 0xb9}, {&(0x7f0000001580)="609f223608d59147d8b3f0ebe57eaf05e785e9a7910bfc83869c5375b0615eea75394fc1049411bec93b154092a99209b4074856c5945b531f854e6c487e783a6fc8a1e58a458e725d6bd7eb4d67cc56e0b661f2b3054d1629d1", 0x5a}, {&(0x7f0000001600)="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", 0xb6f}], 0xa}, 0x0) 17:07:04 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 17:07:04 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, 0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:04 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000000c0)="ff030ed2729257a9e49fab545fbe2fe15dfa49aa15376fc90048ae8b7f5697af65468e0fb2d6932cc9d01ecd876209e4f3f7b8f166a92801cd0dc8de176aa736075608e40b8f054545bd2aed2340b43204385327ed2da65b2d27722399a776432a50ef2836a8b17aeebe0d41076dafbf5a01bb0ad679059b3704fb37c43a884216cf3afe6f57f441761784fd5555a8b45bad2a272e734b449e8f4720067def1ce00145fe9f0c9b0135eccaeaa47a9c4e3773727402253cd975b61df90fcf161cc4763cefca6f8dd1", 0xc8}, {&(0x7f00000001c0)="b2eca751819830634c3150d51e3fb45ac19bf9da603f11119ed9c44c27e877ade7b7e296d52af39426a289288150d47c5b319a2d3fdd95a5be69993e2d87338f33ce1ad8604b908fa06a37edc7eb01cedfd6b0882dbc25b09e3827b02d9181bfe55de4bd2d2b12580e7f6dd896e8a39bb3c56376c5608a30e8df3f016c76ba259f6f0e67b228cc5d9dba7eeaf38e5ee0470441d074ec7c6f32606e170f557091b9a5bfa1d4282b7136c82dbf0ce3f1faa8c5316858617bc1fd61146abbf86ee1a4bab620", 0xc4}, {&(0x7f0000000340)="17e7c023e2825739c5c1ff0071e3e8aaa4c40edb94151dee59563f7227fafe29b12774fa4cff752286dd3f463848fc61a27f64106561f7c8e855e47fa032c4944eb32f374fb2c4ff2aa45568b7a4fd207ba9489862b28c12b899d93b8b937e87d6d64c18364787a03bf491db6addb861716c4115bce0868998559014e1e956a66e78e70eba", 0x85}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="ad4f7e8de05c97cca28cd6e0ce1b7bc3c5fa05f6f6b977f46c76fa1057e769955d1ef6642210cf29cfbb3b0e795b851b10fa8731cef1ffa438423e60f71931c367854b79d0789058efb5dd284e38a1d8a6bbdf17c416022e4fd5e68ad2344b656eee4ee073a76f40caf8458fa7db4e5d48b692aeebb9d2f826b3f768661e", 0x7e}, {&(0x7f00000015c0)="073f7f9b741343b720fe77fcc0c2b44f13d90879e360856f55440899e646245a7e88c0d6fc4a55d599c5058bf9f7576f25294783dd011cae3c76d9e1ba1b816debf5a114e29981b26c396e11d5fae24a49e1c5a31178ca37b94c2ad38e507bc0c3fb39f5773f58c2e59b7b1459780c35044dac7721dc35d0aab5a7b49b6806b104945968d7ec7699f2cb9375c75e061af46cd17d1b43447cdcd8b3e4872eb54821a0e0fffb3284f9f31734805c187f91feb82116da1bfe49ea1b8ae5f66f0530d15ffe", 0xc3}, {&(0x7f00000016c0)="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", 0xb73}], 0x8, &(0x7f0000002880)=[@cred, @cred], 0x40}, 0x0) 17:07:04 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0}, 0x0) 17:07:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) poll(&(0x7f0000000040)=[{r0, 0xd}], 0x1, 0x0) 17:07:04 executing program 2: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 17:07:04 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), 0x4) 17:07:04 executing program 5: poll(0x0, 0x0, 0x320) 17:07:04 executing program 0: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}], 0x1) 17:07:04 executing program 2: r0 = semget(0x3, 0x0, 0x0) semop(r0, 0x0, 0xc) 17:07:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 17:07:04 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:04 executing program 3: r0 = creat(&(0x7f0000002180)='./file0\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f00000021c0)={0x10}, 0x10) 17:07:04 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x30600, 0x0) 17:07:04 executing program 2: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) 17:07:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:07:04 executing program 3: setrlimit(0x3, &(0x7f0000000000)={0x10001, 0x100000}) 17:07:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, 0x0, "338d65c73ce9e29e"}) 17:07:05 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) 17:07:05 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000106c0), 0x38100, 0x0) 17:07:05 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:05 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/wacom', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) 17:07:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14}}], 0x18}, 0x0) 17:07:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000740), 0x10) 17:07:05 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) 17:07:05 executing program 1: creat(&(0x7f0000002180)='./file0\x00', 0x0) 17:07:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4020940d, &(0x7f0000000080)) 17:07:05 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000015700), 0xffffffffffffffff) 17:07:05 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17:07:05 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 17:07:05 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) 17:07:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x5, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 17:07:06 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) 17:07:06 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x2e300, 0x0) 17:07:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl0\x00', 0x0}) 17:07:06 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001d80), 0x180000, 0x0) 17:07:06 executing program 5: chdir(0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, 0x0}]) 17:07:06 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 17:07:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010001fff00"/20, @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x38}}, 0x0) 17:07:06 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737ab", 0x44, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:06 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x1}}) 17:07:06 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x68, 0x23, 0xcb, 0x40, 0x147a, 0xe03c, 0x3c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0x7a, 0xb1}}]}}]}}, 0x0) 17:07:06 executing program 2: truncate(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240), 0x7fff) 17:07:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000980), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 17:07:06 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 17:07:06 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737ab", 0x44, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x1) [ 1258.493562][ T3748] binder_alloc: binder_alloc_mmap_handler: 3745 20ffc000-21000000 already mapped failed -16 [ 1258.527848][ T3752] binder_alloc: binder_alloc_mmap_handler: 3745 20ffc000-21000000 already mapped failed -16 17:07:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)={0xf04, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xef0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeec, 0x5, "b010606286ff4e735b4e7c64ce713d7db01bfc483bf9a8d86a07b0dd10bfaef92b3bebe295ec7134012cac0c7314f0713ce36508645eb92c59228617aa813bac55392a80f7e059f55d23f779d7fe69a1ec8e3f661bab9fc70aae4fd1145479c53310cecad2f657d3c871b455e5af37945df474b343d84129dc069143aaca5be0ff84b1188cd6a7915c42815cf567a4529bbf68ec17ff1a4653ec78c23cf5fdff931ddc07740799be3521dd657061c6ade263ff02ce8a972cc30eeb9c04eba2e18f26116bffb341ccef41f0bb3d6d15bac2fc9bb76ed35db7bfa4dd651795ef06001dd18a22c57c90c71a2dc300dac2f0e1b775e18d1f248641dca229ba7446709dd75866c6abb40d5cf9cbfff2f138ac0711e8067bea72c598c247b25ece0c4de829899a8771e56755137e041f06f4890220086004f91e9386512c3d226e130c7aff1e34e47877e7c5ad6bad179c82540679e123543277217802fff50571b982305ee2703a1f7500d159518cb71dbe46ed14ae7ff4742a5aa9094b2b9949f344e5962fe9f3ca3dd4fca23162620e750c1a3abdb90c54729c3c80f3c5043af68d11be8380d5a7dad6f246691bb8f4e4cf932f7900c8e4f0a61fd439293bfe5fc59a40f24961e5e3dff37aa58db08a4a5210a8268aac38a481402cd1bd78b5ac0feb767c802db662071f562f034652c5382c691e8386544bbd9a3a817a5fe0cc13b0f651f94f91d318b1fb7130eba30749eaafa1aeb4218bb1b9b51bcbf1e5a4a2e06396cc2ac4fa28ee2cba4c0cec4ad9fbb85c604c36a270087c02024b886886833c990e5b9a636612a2d631922725042c3274be91ca24baddc391c9ecb50d326467db6822a3a5d370f466cd6642ef699e2da61e69e2f8e0088236624c6516e981d8f6436c65a82c865516bf3f8aba30284b9e9347acf797f783b9dbe39ebaca4544bbb599654ad0bf33facbc36edce31b50249e2c756ee48541187e7032b918e062f94bf71fb7b818d4291ed97393bcba0ef33522a20ebfe684bd50580b6a49d7c1c0b26054c901c3c188c6251c0748cf5462947f48fcb5f397186cf9435259560971938a201281de789ff1db268eaf77b0f82083e7bd96279d97761b8e849670fb1aa162f6ee7af2a9715938069f669f7c1a04a0887bbacdcb92d2e1fbf34af6cd427e25c9c66a8b354003dc0d784a3df81d262d7f21a542b5cc91a6d897c3dc84993b6a46d780b3a8c383bb246215434d6e575295683d95b8a6c49c7390d79327c72e8f4f494df48787566840ee19098938fa3d8af92e7db393392d5397352f4680830cbe94bd446331d17865f2c14327670fe71186c2d2bf29003d7cf00d41fec05ebea276403ed6cecf9b2f78a62d8ee1edc0217a60c263ffc368cdb87953e9f7e70060770b6118e7205ecd188584957bcc07d3f00681b7868d011caa180652d4383b5a1feefb5db3d160de13e588cf093a777bc6315518a1dbf03beb28ef69f95a0566c7b111cc2b470065e0953e9786c7d906782ea6c367e90ee4168bdc1bfc48ba028f9a10fdcfd925a7341fb41550c8d2718661a40cb0a0e3a92129408ff16db70098d2a0b4e5b734ad2282727e334e5cf5f79136cf74b4685fc74278da1a981b4dbd576a5004b3b1e64c8b8fef88146432c051caf789d3dfd1c77255a3979395a1f10cd153e525605358c367a405114d30787180d52c1d87859857281f8f8ab38de5f6b6388d8f432ce68f3ae81c2a40b6837ec374381a35b218f97f24d24e53684e00b6d9233f4e22fde0c4f17c3f93f7f76e8e1bf3cabf18985ec93f4a143151a3b03a7c8349fcddffc5682af101adaa3fa43014db24031af6f347821b00592f33df057f367b4e84f8a537e39f1cfc1426ad36ce1d83536aaeb857ff49e71ba3073bf02f8a8c05162ce5e03faf7c90b6b882322969c91d77008a2926a9dbe9e4f264d944fe8cc6725899d939af75557597bf70372a0045b944937e8d2095444b70ea3ba728acba08c566be92deba2197078b22fc23e5afa4314358d26daedd2b9c4b870afa66e1571c046b73c9c513b74634c19de58bfdf816344701df6f5725b02c1a4459e842e99adca49677e2201ccb7aaf5dfd2a02d40479b70216ab7a8a0477054bcaa15b23cb2282b81f0fd94c97cbb349125092e5572c27447588fd28b43cd2bfec6c30b2dadc86314f3126b8147670637cc0c6edeb41c32988b0a323eb7d7afee376537bc12482296fdb22d390f64205429e4806fe4b8f2fca9f7c742087c51def7b516bef334dd3cc51bb0ca989f376bd8ca9af2e3238b577ead6afa5b4e0e6facaa7305d895a32602156af16477c7b20efc7b29b4802d293b5dc1c26a88c9b7e2b65264f822a0554fa9cbc7917aea2903791d094a182bbdb99bdb0321788f2d6488de3c3e659a99b401f648d415837abde0f03805c945de181c6ab8ae7e9a6551938207b88b37b4f3c654fb7e6fb8ff9c1480a2c12b6be2f922fdd7336cbb310ae114f5f94693f177bde3adcce6f8f1ea972229621c51a4cb5b0cb59691f986e73a3eaa8bfd02c56c3b9769a3512fedd74f1c80902fc15bc02bf0bafcaaffef2c0ecac7c252ae054c96726a2aef2b31918286c7540485478c34470d447cf654491c145e7c23d0b6e5e9674e3aea2b9e8ae94eacab97297e7fda25ebce30677c0b96aa875975d29b625951653d6c8bb0bfee49e24a50b7533ba518a8e1bc7b3f76f73c057d22ca2ef90ca02ca5d77a91fd29514dfa78274ed709da4f86947382f964dbeb674e131386b5075336540f2bbf3c08e6eed0c0284842412c9678656c47151689c599644d236f65d6afa1f14a69bd27cb3f915d4119487d53af28d243cb4ca0d70eba59579502a36699632ef99bf524292b866d7edf4a77b8563d969f5ff018e2701958fe05f6cf7ff1a0704246c6bb91ff0c1b09caee969a3b5796be71f5d8ca5ae9873f8dc1e8a865e28ac28f594f1253327418cce536b9ea8f9bd54743cf48ff8f867635210dc3c8891e2b6d67619720e07b2946c874ab1b56e8f2618606ec650eac2c90eb6b6d52d47823786a655ea39c1e5d959498093ced5ac315f7aa5c2a6cf7b50568ee180d1200a524076710be602f7416c04ea8a907a6625703d85472c7a4ec5a87c472eece004c5d8457cf1ee29591c0e1bf52a134b3bbc62231e17c81f6d23da343a5a45e2a6458b23ecb19f2c29f9ae531d05f7969e3f0cc222ffddff6aceae5101ede8951e5bcd855eaff2a6802e37005c4ef288093726a31628eb6201170d5935bddd9b8448050282ebbb5e7610a60af6dee9c15d1d5c8ce642d36b10ec01fea0509f44722c2f2a899f5b6dc80627ba92c05212395b3944f4858f733ebc6a082f3a0d371767c797d2165512441c141d69455b21005559c11ed8423a5e764ee3217fc3b44b0318e16a71c266a7c588196581842b39422432237a151915ae4180eb2e8681eec45acbefe60bfa473e94c662285037659b13865d3449f27055d8e1e8982d4a6215ba5a083fbac3624c6807392b3463a0be2f81bb134e18df7eb1256fcbf3ce563aa10148c3233e53277564c35621f9da15b94b7bbfdd411cb9c3b11d7a7ca1b570d521a1c98252ecda6c534a6a3421c4b4a98c3bd29124deec7ead34c18fe444fcf8b5110335eee6853b20229c43345ff6996e9fdc81ff31ad070375f1fdfd68f8f0d940e058a77da473d73892dec38026f73d9a7445f0e618305e2328f341abf9ad7cd7adeb66613364e68e9213772d176955bed4abe4f3a4890b1d844d5f456cc113e00e99f2d70d5fb786d6f92e9b6b61a4861809365e83e4139fc4aa31532ed7155857a256a5e402ac1e932843d663014e5be7df725e9a4e7003ebb932ee3b112cf86b3cfb87dddc22929d07bc707b752921592a7d8d70021fdc6672b79b2764846cf5d534f239c732b83da09f00b5b546c3ef929f8ea9b556e594772b4b1a8b2b5762c2d48289beae3baef5e3c725ae5a68ce43d0179457b381364b38e69dfa257d2afcea40ed0773d7470dcba1a72016cdda23a212c1b9767a687fea79eb1a861f3e09abf9e00024096d879b3c75bb12d91edfc2752bf674c42027fc1f4eab55ec8d1bc61f1d198dac15b1fc78d29cc4a4c20fec7d6f8c99a36b2d98bf321aeb417a3322f499ae80ea0645aa7da2f9a755b37aaadfd80bff08251a6c5bcb95ea44e285d13c853e76d4f1d6e38c8d73cb9be7cae11310ec31e72bca3faa9dfad464b0fa248f72b7b8b65e0db98747fd30053ba69a71d5c0fea2565152c0885cdf9ae3bfd142158968a16192acfac05987ff810eeae233b9b3603fbf8f635a81a42dcee9dadd2370187f35ccdcc65fa1e95fa055322a5a6aa64768f857f88180b6992392a51c809b90dfb69aebf6151eb539cc42dc68f212763fca16640542a868d9f01976c987257ccd9b6159ff33379646fc7f2565bd911e9f860e3c0b11965ddb5b70cb9ce27e40dff841ecb0c8dae7287db1fab29dca4d4f3bfaf5f97187aec8dab0f572b98fae35e79f8d8f59a0b9c8c37964cffb9c2471e704aea36d7c3988ad5af74f52af4392e6e99b925208305f89d36cea6de4619ec83282dc3a094a78864e2c1577f67ac4fba2f85714f3b8a81095edc8197ed43c03bd5226485bdd3e9f2e7da8d18d47d49c84edbd212de3f8a41a1d552629292c4b92e5dbd1d5b2dea1d7b4cee4e0d746888295f265a9dc8c0c4148742c9473043867ba18d88c99559b9cdd10077dfc444e2468d26eaaa10fc4a01f161f9f78f7516d35125b998aaa0e0034153024cbb4e069161aba886c576c8fa8207fdd0a1144c7ad748b5e8ef908d102ae236bcccd9469d662b96cff2b1f2b885ff39500762a302889aaee57112467f2e7ba11a2955c069b9d19875589eb7cc3b62c300917b4d11978aadfc0f7d16e7345d020a691f98340235f8055576870d02245c77364bae308e93ea8f5bd7b4ff28a03fa91774fc5ab5479ffae0d8773cb9ba21199e6f294622a71ff3432db328987779968db82ae3bf51ff0b190b9490d56b3d0966def08e0b8530c71c57d7656a3939cfd1b032f1f734e9d709aa983ebc4bb16c70311c82d32ec390d8d8730d1ba2ce44ad111f2ee02150891d5fb360eb3d105205395a0e5f12f4e4585cf95e334a08740d989fe68f56ce3980cb9f9e368cee3840a736fcd709c5fb63a41476dcb91975d3fde218e0c1574bd2f4e3bfb5d19cab234c5eb6258e3700622bdc54808fb8475b61116273da86027245300d0e4fa30506cabc10cdd45826145a262454adca8fda5780ed14caf4025bc76f7d330d6efbf2ca0368f52b9bc5cb1c7330db2a185a76ba6a693d1c325d0736f75028f555049cc7245be1cdc28c788be7de6852a514680857f"}]}]}, 0xf04}, 0x1, 0x0, 0x0, 0x40000}, 0x800) [ 1258.618606][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd 17:07:06 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x120c0) 17:07:07 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737ab", 0x44, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:07 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000600)) [ 1258.828699][T22015] usb 6-1: new high-speed USB device number 13 using dummy_hcd 17:07:07 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001540)="9b", 0x1}], 0x2}, 0x0) 17:07:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1259.106175][ T3756] syz-executor.2 (3756): drop_caches: 2 [ 1259.148437][ T3769] syz-executor.2 (3769): drop_caches: 2 [ 1259.149307][ T7] usb 2-1: New USB device found, idVendor=147a, idProduct=e03c, bcdDevice= 3.c3 [ 1259.183840][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.204719][ T7] usb 2-1: Product: syz [ 1259.217700][ T7] usb 2-1: Manufacturer: syz [ 1259.228810][ T7] usb 2-1: SerialNumber: syz [ 1259.251837][ T7] usb 2-1: config 0 descriptor?? [ 1259.369112][T22015] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1259.384782][T22015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.409981][T22015] usb 6-1: Product: syz [ 1259.422059][T22015] usb 6-1: Manufacturer: syz [ 1259.442795][T22015] usb 6-1: SerialNumber: syz [ 1259.499525][T22015] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1259.544485][ T7] usb 2-1: USB disconnect, device number 15 [ 1260.148714][T22015] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1260.318481][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1260.356781][T23409] usb 6-1: USB disconnect, device number 13 [ 1260.848669][ T7] usb 2-1: New USB device found, idVendor=147a, idProduct=e03c, bcdDevice= 3.c3 [ 1260.857871][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.866082][ T7] usb 2-1: Product: syz [ 1260.870627][ T7] usb 2-1: Manufacturer: syz [ 1260.875414][ T7] usb 2-1: SerialNumber: syz [ 1260.884144][ T7] usb 2-1: config 0 descriptor?? 17:07:09 executing program 1: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) socketpair(0x26, 0x0, 0x0, &(0x7f0000009ec0)) 17:07:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/242, 0xf2}, {0x0}], 0x7}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 17:07:09 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) 17:07:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a876", 0x66, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x68, 0x23, 0xcb, 0x40, 0x147a, 0xe03c, 0x3c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0x7a, 0xb1}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) 17:07:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="070202010000c1a316"], 0x18) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}, 0x8044) [ 1261.140144][ T7] usb 2-1: USB disconnect, device number 16 [ 1261.208412][T22015] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1261.215421][T22015] ath9k_htc: Failed to initialize the device [ 1261.250484][T23409] usb 6-1: ath9k_htc: USB layer deinitialized [ 1261.305936][ T3819] syz-executor.0 (3819): drop_caches: 2 17:07:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/242, 0xf2}, {0x0}], 0x7}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 17:07:09 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)) 17:07:09 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 17:07:09 executing program 5: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) 17:07:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a876", 0x66, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1261.514654][ T3834] syz-executor.0 (3834): drop_caches: 2 [ 1261.548365][ T8420] usb 4-1: new high-speed USB device number 20 using dummy_hcd 17:07:09 executing program 5: clock_gettime(0x0, &(0x7f0000000980)) 17:07:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c910ccab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fbf8", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb434921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0x54}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x400000a) 17:07:09 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 17:07:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x24}, 0x20) 17:07:09 executing program 5: accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) [ 1262.078358][ T8420] usb 4-1: New USB device found, idVendor=147a, idProduct=e03c, bcdDevice= 3.c3 [ 1262.087427][ T8420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.096622][ T8420] usb 4-1: Product: syz [ 1262.101548][ T8420] usb 4-1: Manufacturer: syz [ 1262.106161][ T8420] usb 4-1: SerialNumber: syz [ 1262.113433][ T8420] usb 4-1: config 0 descriptor?? [ 1262.369273][T23409] usb 4-1: USB disconnect, device number 20 [ 1263.148165][T23409] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1263.668601][T23409] usb 4-1: New USB device found, idVendor=147a, idProduct=e03c, bcdDevice= 3.c3 [ 1263.677697][T23409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.687321][T23409] usb 4-1: Product: syz [ 1263.692274][T23409] usb 4-1: Manufacturer: syz [ 1263.696885][T23409] usb 4-1: SerialNumber: syz [ 1263.704012][T23409] usb 4-1: config 0 descriptor?? 17:07:12 executing program 3: clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, r0+10000000}) 17:07:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1124}, 0x40) 17:07:12 executing program 2: socketpair(0x10, 0x2, 0x7, &(0x7f0000000140)) [ 1263.958521][T23409] usb 4-1: USB disconnect, device number 21 17:07:12 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={0xffffffffffffffff}, 0x4) 17:07:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a876", 0x66, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:12 executing program 0: pipe(&(0x7f000000f540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x26) 17:07:12 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80) 17:07:12 executing program 0: socketpair(0x1d, 0x0, 0x101, &(0x7f0000000140)) 17:07:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000058c0)={0x18, 0x3, &(0x7f00000056c0)=@framed, &(0x7f0000005740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005840), 0x8, 0x10, 0x0}, 0x78) 17:07:12 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 17:07:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca827", 0x77, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:12 executing program 0: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 17:07:12 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)={&(0x7f0000000fc0)='./file0\x00'}, 0x10) 17:07:12 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)={&(0x7f0000000fc0)='./file0\x00'}, 0x10) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) 17:07:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8938, &(0x7f0000000000)={'vxcan1\x00', @ifru_flags}) 17:07:12 executing program 3: clock_gettime(0x0, &(0x7f00000005c0)={0x0}) select(0x40, &(0x7f00000001c0)={0x5}, &(0x7f0000000200)={0x3}, &(0x7f0000000580), &(0x7f0000000640)={r0}) 17:07:12 executing program 0: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) socketpair(0x0, 0x4, 0x0, &(0x7f0000009ec0)) 17:07:12 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:07:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 17:07:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1124, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 17:07:12 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) 17:07:12 executing program 1: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000008080)) 17:07:12 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca827", 0x77, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:12 executing program 0: accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000740)) 17:07:12 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 17:07:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x40}}], 0x1, 0x0) 17:07:13 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004540), &(0x7f0000004580)=0xc) 17:07:13 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r1) socket(0x22, 0x80000, 0xfffffffd) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000800)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x40, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0xffffffff00000001, 0x6}) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b1", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 17:07:13 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000007f80)=[{{&(0x7f0000004300)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x1) 17:07:13 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 17:07:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 17:07:13 executing program 2: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0) 17:07:13 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 17:07:13 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca827", 0x77, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:13 executing program 5: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 17:07:13 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4) 17:07:13 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 17:07:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20040002, 0x0, 0x0) 17:07:13 executing program 1: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:07:13 executing program 0: semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000000)=""/51) 17:07:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000003740), 0x0, 0x0) fcntl$lock(r0, 0x9, 0x0) 17:07:13 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)) 17:07:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) 17:07:13 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000001c0)=0xffffffff) 17:07:13 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17", 0x80, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x127}, 0x14) 17:07:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 17:07:13 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000b80)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:07:13 executing program 3: r0 = socket$inet6(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@loopback}, 0x14) 17:07:13 executing program 2: writev(0xffffffffffffffff, &(0x7f0000003640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 17:07:13 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) 17:07:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x2ac}, 0x98) 17:07:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000006c0)="96f5961ea17566a100f9556702b5a0a348764a163bf54871ce87a0f0b3733d691a39aa4924e1b2498f59dd24e20ae4607d56805aa78f2d31e99d37dbc9ab4451c26dfc15ca11a90b23e8", 0xffffffffffffff16, 0x84, &(0x7f0000000080)={0x10, 0x2}, 0x10) 17:07:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17", 0x80, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect(r0, &(0x7f0000000b80)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:07:14 executing program 5: utimensat(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x0, 0x4000) 17:07:14 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2) 17:07:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 17:07:14 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000040)) 17:07:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000300)={0x0, @in, 0x0, 0x4004, 0x210}, 0x98) 17:07:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) bind(r0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) 17:07:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="c6", 0x1, 0x101, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r0, 0x1) 17:07:14 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 17:07:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17", 0x80, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:14 executing program 3: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1015, &(0x7f0000000080), 0x4) 17:07:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000080)={0xfffffffffffffd9e, 0x2}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)='-', 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000d00)='0', 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000004c0)='r', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x26}, 0xb) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x5600}, 0x10) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 17:07:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="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", 0x201}], 0x2}, 0x0) 17:07:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1014, &(0x7f0000000000), 0x42) 17:07:14 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="db", 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 17:07:14 executing program 5: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x8, 0x4) 17:07:14 executing program 1: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1017, &(0x7f0000000080), 0x4) 17:07:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xb) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r0) 17:07:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 17:07:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000002580)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000002400)=[@cred, @cred], 0xc0}, 0x0) 17:07:14 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000280), 0x4) 17:07:14 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9", 0x84, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000ffff"], 0xc}, 0x0) 17:07:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000280), 0x4) 17:07:15 executing program 2: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}}, 0x14) 17:07:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), 0x4) 17:07:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="8a", 0x1}], 0x2}, 0x0) 17:07:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) 17:07:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000280), 0x12) 17:07:15 executing program 0: select(0x17, &(0x7f00000000c0), 0x0, &(0x7f0000000800), 0x0) 17:07:15 executing program 1: r0 = socket$inet6(0x1c, 0x10000003, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 17:07:15 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9", 0x84, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 17:07:15 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@abs={0x8}, 0x8, 0x0}, 0x0) 17:07:15 executing program 5: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000080), 0x4) 17:07:15 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000400)="db", 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="9e", 0x1}], 0x1) close(r0) 17:07:15 executing program 2: socket$inet6(0x1c, 0x30000002, 0x0) 17:07:15 executing program 5: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000000), 0x4) 17:07:15 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9", 0x84, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:15 executing program 2: r0 = socket$inet6(0x1c, 0x10000003, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 17:07:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x5e}, 0x10) 17:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000840)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xea4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0xae, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x0, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x8, @device_b, 0x0, "", 0x0, 0x0, @device_a, 0x29}}, @preq={0x82, 0x78, @ext={{0x1}, 0x0, 0x9, 0x777e, @device_b, 0x6, @device_b, 0x8000, 0xab0, 0x8, [{{}, @device_b}, {{}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x8000}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @broadcast, 0xa51b}]}}, @mesh_config={0x71, 0x7}]}, @NL80211_ATTR_IE={0xcd, 0x2a, [@random_vendor={0xdd, 0x47, "3d05eff763f4cbba2d3490f85f5a976dc249acbdf93649a4d9922197ffbe970070a2ac4c76a1d659766690f0c45941242bb618fff6d49add1407e8099e76deb01d6517a2e8ffd0"}, @channel_switch={0x25, 0x3}, @ssid={0x0, 0xe, @random="6324e6f7f9d129d1749cae8eadca"}, @perr={0x84, 0x69, {0x40, 0x7, [@not_ext, @not_ext={{}, @device_b}, @not_ext={{}, @device_a, 0x2}, @ext={{}, @broadcast, 0x2}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext, @not_ext={{}, @device_b, 0x0, "", 0x28}]}}]}, @NL80211_ATTR_IE={0x75, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x4, @broadcast, 0x5, "", 0x7, 0x8, @broadcast, 0x7e}}, @measure_req={0x26, 0x4e, {0x3, 0x4, 0x1e, "50d8c1df13c0c8b36d74166be04581f8ba9fcb3e3d4e3be4ca495752e9ab4056e7fa1b4a50fcc2c0b74155649c67b77eb2f0c24bc6a3f995abeba3b5f66be2649fc43346fdcab53ccfd246"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x101]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x2e9, 0x7f, [@measure_req={0x26, 0xd7, {0x7f, 0x0, 0xa0, "8f1386f49f9be91bd72244e83e6f692426cc0f9da9e1bdf8e0b11a5cd5ef15c391e9d0b578823a1af7ae28d0c9deee1a27da494d9c44fc43540221513c1324fa1f1cfab967e46d41fee95ad306e5ed606283b7a5efa871d580d24a9a885709bd8cf5ca7ea94dd4905541d7a48a5dfbe34bec9af81c694260262fb15817341ba9d80cb128afb62e9064d398b795f7168477e066851351890e434c211541759204c975b8a648db25c9c2bbee950f2f2e1a46eec6c3b010f7919a1511e192d79f266d02572b0f9b732da2a257aee2a6bc7c78fb33f1"}}, @tim={0x5, 0xf7, {0x0, 0x0, 0x0, "93576f34be70b173dc493feaa0c0b7b056300aa608b1b3320afb1f3048216686bd07e4f332d6925df01fa9644a167c1d4a732d6c00c3b96ae81d79f8d07044d50053cfc13f9505857f43264de88a706f17ba60a8c6a32aa14c33def64a0b65850f7453c183a406579c0762b6ee1945f052c3b4cc794621caed8ad8b412a7e935baa9b74284982f157c97f4d31b2f191dcc1e955c46417f350ebff3d2a1f3f0bb1e7a93e1a700c11ead9827f74bd6cb9062517896d020699525a7179c2af704ebbd80eca3dbe4658d0b665f49a5ff54ddb3bb2a537d83497267a37490643374c2df5018e0f5b1fc4fb753b7058bce9190ace0e524"}}, @cf={0x4, 0x6}, @measure_req={0x26, 0xd6, {0x0, 0x0, 0x1, "4c010d97504b55f6057474ea4b5084cdb0d8e538aec930bad5d02708dbc35e5ab5f9e1bd0fa67369ca78f63abb6421bac8b825a35eb8ca0c22818a6b29c0bb4d80e0aba523e5fd5410a3864b9fcbe2f7b827846b32be2751962afaf738f17e8e105e2d2fc12dd8f24655bf73ce47d194c3c1450baabf7ad36e68e48dffd10ecbca57eae6aa0db083208accd252bc3726a41442f7319e8e01c4fb7a85910569f534309e96473fd8f953d70f85cd18ed1cfc429f731489aa2fd1afe337583aef9fe7d7f86810b60e9e6a1d418ed1e5d4b793e4cd"}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @broadcast, 0x0, @device_b, 0x0, 0x0, @device_b}}, @supported_rates={0x1, 0x2, [{}, {}]}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x311, 0x91, "d3d69bcd993e931e7f94f9b7c532c824ab391e6c4b7d1392763abe965ed4ab13617c043136dcafcaeeae0843ae826acf14035e3ee58c4f26f1fee3f41a1aa09c3b940b2ea9a05c2e2d9bacb13eddecc71841d999c299da6bfe0fd9f3e728b44cba983c396fa54752d353adc1d700b04907428c2924b74bf32232071c9782e848f3823a2482624a13b91e1a1dc5995d822a940532fc482b560e425fe62b7b2b2c561eb904a317fd6dfc4f1ea02b0182a386c7a84e03476ef514c2791f11bd2665ce1e35efc89a9e3ac78a050dbf4cfe9b072d5ffdaa3dbb80e708e4245df6ea7e8c1c11e22ee996e1dec03ed23a13bbdf8166a0ac3c34b74fe524bf4814f23b8c4a4cb800b468ad03027ac988b715432623a07e2835135e4940187c3c108785c36e37d27aca7da0c10482e754d583753ce8ad7d11c9872804c0f3227d2ef9d3ef9dc4dc437794557fe0c6ce0bfcf6ddfff7f18decebb847cf98f814a2ecf9410e81e1f9ff3d2151a4782190645f11e86f993b79e7de938a45a7e4f7340c76cb9240bf6a119457757344b85c0213d07366d704e16853449023050074d99094e02f17ee564b3da708a52a7caa43742a4c3af72076a3eb4d24aef01ddaea727ebeb9ca2adcea4635e6fcf6d8bdf4a5a2c3905b034fd4860fda77331a6214928d65ebb8036fff71bec765b0b8b7c85cb630da1e74f30a4a3fa0a48048de80600bf88f97144b6e8750a07907e687e447827584f6a9b20127575f189f79146e6fb7f27981358d3bf7121f82c9d66a0cc7456ea27f74b201e659deddb56455579b24a0a968d20b60b038779ac7b950c100b5b851160dcc630b56fe9c2896d090280b54b1d592be272b7fd7c76492afdad5b51dec479f4d457c50b3c7df36b7ee380a2449ec9d6db0c38e5d79f4b028a5b77746df969efe4f9de47d677128ac771db46caefae2328a09af73bdbfb2b1b2b67d5bf971f08719e4181306b50370926c287707d3335ae64833a0f8019edfb2ea22c7c5fc565400a19228092efdf455768debb7139627d237d12394964e3827aef00f9080bd356c489c15d5a70f9fe34387e287f8d778962148ac9df49ee80a82"}, @NL80211_ATTR_BEACON_HEAD={0x335, 0xe, {@with_ht={{{}, {0x7f}}, @ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x4, @default, 0x202, @void, @val={0x1, 0x6, [{0xb}, {0xb, 0x1}, {0xb}, {0x2}, {0x60, 0x1}, {0x1b}]}, @void, @val={0x4, 0x6, {0xfb, 0x0, 0x0, 0xff}}, @void, @val={0x5, 0xf6, {0x1, 0x1e, 0x4, "eb29b6b507856667e85817056cc18b000825e9f3c2bbf4fe7b16c7f429940b27c8bb8f1f267fd709721350423f525253130e90c2daa76f7a64e445f69dbace885b88409c79a9342aa9839cf23b8df875ab3c65fe4347f2001f8b773ec64105ba196121590bfd16e1a4f7401743bf4176577d338ce26fb29aa11f8b21ba067d73969b63e69b365a77069834e18f43476b49e72ac038ad4fd035d82bd1f97a2b608e3f98e5b3aedf8fb2075a0c92ee4aed9505cffdf700d61b0071a2fac71c9f1e27b01357afdf02c9606fb0865bd8bdd92e0c58db7df170d6edcce28f8cf5fed05cb5c2ad89f65eaffa9d1a18e39d65ad2953c9"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0xdc, "df60ba85bae848bceacc281558ee87f6794ae23edc99a82dfbdde91d104ae00eb7cf6e636446cb6cfc6b52749f01ff1cfb92928b95e11709649a60973fe912ef47c9cabc8857b7067dab5f98bb532f897eb53567b95e4a5ec9f70d46e2da218e6a4e5b784bfff1a1a725e4a67e148675c8e63affddb153ea846631f8c46c250f84cb5508ed9740738727a746644d6ca74f22d695ee5ee635ca5af6b984255c3e14cb533abd88fa9af83135acb6c918701970f43876740bc158ab953a8730e368d6d2f463fb06cb2c2248b17f3dab928814d596dbe2293acf9710cc1a"}, {0xdd, 0xfa, "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"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x131, 0x80, [@random_vendor={0xdd, 0x64, "e00801a7e37dc41f9098e919c07efd10b63cb46362b8add6af5747046e1b90c583df16648499b3e59d1b89ff80baaf38a2c030bcd1798f2af665afb8e33648644af8e4b23ed9a47c6554c75f3dae938aa8d37fd7700f52f863722f4490c7eb25199c5705"}, @random={0x2, 0x11, "f12e68c2249fc61c5f3b307efe7020f0dd"}, @mic={0x8c, 0x18, {0xd73, "549d246416cf", @long="5f60c17cc8979b6d5cdad8278eea4f93"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0x36, @void}}, @ibss={0x6, 0x2, 0x101}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x0, 0x0, {0x5, 0x185b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x3, 0x40}}, @measure_req={0x26, 0x70, {0x0, 0xff, 0x80, "fb3b860b5134e5990f6e76ef1f70b8f9a69205d04437c2fabe20e4c905f15cf3e4b6b604cee2796e51b73abd7e79854ebe19719e198ff57e59cbb3010f7dfab7c9aeca7135b8c1efd8bc8c82d6485c2f68ccc310f49c3cdd8fef82508ebb4e6b22df3a67ba194968c74cd6f131"}}]}, @NL80211_ATTR_BEACON_HEAD={0xe9, 0xe, {@with_ht={{{}, {}, @broadcast, @broadcast, @from_mac=@device_b, {0x5}}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0xe}}, @void, @void, @void, @void, [{0xdd, 0x96, "c3baf59cbd5136b2e43eb974791fa8512d5e563d0037ac0264706229e5ea025fe2b029862bd02cdf9349f97aa0c1737343785c4ceb293e78b4d9640625991a799dae6be3c9dab678bf2e50a2265920d691758c9dda8e3c091b5b81fa9876eac2f8f1423ba0ea9ff873a3989353961f9eb119fef2660e99296de6be07c86c9a5d2dec4191c1ce6157d502fdec0dee5c7babc00edca006"}, {0xdd, 0xe, "f3004517221f7f0243ff5f6ad6a0"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x12b, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e6cbd834311a"}, 0x0, @default, 0x0, @val, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x0, 0x80, 0xe0}}, @val={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x8, 0x0, 0x0, 0x316, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x8, 0x7}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc0}}, @void, [{0xdd, 0x6, "8198fa2fb7de"}, {0xdd, 0xc2, "f2bac5eda282f80a15229f8717d2a0885a21adf5b85f08d2720416859db687cfc9fb5417365ac50e5911f4c859332c0f83955054e17563c54cfc9651a04a7531f551e93fb4d3c04ced5b68effedba5975a2d7ecb93412b6bc8ec4e8458e739e0a714bdec452d2cf50011d69cd8418514cfe80bbb8eb42c2a096e7503f0e08490e6bf2f67ba7ca4a81e3a47ff207cb1c268d27a86ad65abdd0d54b3dc49fb0aa2be637c3c645d5ff3273138ec00fd75591d83fc00dab333a5039d812d1047bf25124d"}]}}]]}]}, 0xec4}}, 0x24000000) 17:07:16 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xfffffffffffffeab, &(0x7f0000000000)=ANY=[@ANYRES16], 0xc}, 0x0) 17:07:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x40, &(0x7f0000000200), 0x4) 17:07:16 executing program 2: select(0x40, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe, 0x0) 17:07:16 executing program 1: socketpair(0x1d, 0x2, 0x5, &(0x7f0000000380)) 17:07:16 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462d", 0x86, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000840)={0xec4, 0x0, 0x20, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xea4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0xae, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x64}}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x8, @device_b, 0x0, "", 0x7ff}}, @preq={0x82, 0x78, @ext={{0x1}, 0x0, 0x0, 0x777e, @device_b, 0x0, @device_b, 0x0, 0x0, 0x8, [{{0x0, 0x0, 0x1}, @device_b}, {{0x1}}, {{0x1, 0x0, 0x1}, @device_a, 0x8000}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {}, {{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_b}, {{0x1}, @broadcast, 0xa51b}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @NL80211_ATTR_IE={0xcd, 0x2a, [@random_vendor={0xdd, 0x47, "3d05eff763f4cbba2d3490f85f5a976dc249acbdf93649a4d9922197ffbe970070a2ac4c76a1d659766690f0c45941242bb618fff6d49add1407e8099e76deb01d6517a2e8ffd0"}, @channel_switch={0x25, 0x3}, @ssid={0x0, 0xe, @random="6324e6f7f9d129d1749cae8eadca"}, @perr={0x84, 0x69, {0x0, 0x7, [@not_ext, @not_ext={{}, @device_b, 0x0, "", 0x2d}, @not_ext={{}, @device_a, 0x2, "", 0x35}, @ext={{}, @broadcast}, @ext={{}, @device_a, 0x0, @broadcast}, @not_ext, @not_ext={{}, @device_b, 0x0, "", 0x28}]}}]}, @NL80211_ATTR_IE={0x75, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @broadcast, 0x0, "", 0x7, 0x0, @broadcast, 0x7e}}, @measure_req={0x26, 0x4e, {0x0, 0x0, 0x0, "50d8c1df13c0c8b36d74166be04581f8ba9fcb3e3d4e3be4ca495752e9ab4056e7fa1b4a50fcc2c0b74155649c67b77eb2f0c24bc6a3f995abeba3b5f66be2649fc43346fdcab53ccfd246"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x2e9, 0x7f, [@measure_req={0x26, 0xd7, {0x0, 0x0, 0xa0, "8f1386f49f9be91bd72244e83e6f692426cc0f9da9e1bdf8e0b11a5cd5ef15c391e9d0b578823a1af7ae28d0c9deee1a27da494d9c44fc43540221513c1324fa1f1cfab967e46d41fee95ad306e5ed606283b7a5efa871d580d24a9a885709bd8cf5ca7ea94dd4905541d7a48a5dfbe34bec9af81c694260262fb15817341ba9d80cb128afb62e9064d398b795f7168477e066851351890e434c211541759204c975b8a648db25c9c2bbee950f2f2e1a46eec6c3b010f7919a1511e192d79f266d02572b0f9b732da2a257aee2a6bc7c78fb33f1"}}, @tim={0x5, 0xf6, {0x0, 0xc3, 0x0, "93576f34be70b173dc493feaa0c0b7b056300aa608b1b3320afb1f3048216686bd07e4f332d6925df01fa9644a167c1d4a732d6c00c3b96ae81d79f8d07044d50053cfc13f9505857f43264de88a706f17ba60a8c6a32aa14c33def64a0b65850f7453c183a406579c0762b6ee1945f052c3b4cc794621caed8ad8b412a7e935baa9b74284982f157c97f4d31b2f191dcc1e955c46417f350ebff3d2a1f3f0bb1e7a93e1a700c11ead9827f74bd6cb9062517896d020699525a7179c2af704ebbd80eca3dbe4658d0b665f49a5ff54ddb3bb2a537d83497267a37490643374c2df5018e0f5b1fc4fb753b7058bce9190ace0e5"}}, @cf={0x4, 0x6, {0x0, 0x0, 0x0, 0x5}}, @measure_req={0x26, 0xd6, {0x7f, 0x8, 0x1, "4c010d97504b55f6057474ea4b5084cdb0d8e538aec930bad5d02708dbc35e5ab5f9e1bd0fa67369ca78f63abb6421bac8b825a35eb8ca0c22818a6b29c0bb4d80e0aba523e5fd5410a3864b9fcbe2f7b827846b32be2751962afaf738f17e8e105e2d2fc12dd8f24655bf73ce47d194c3c1450baabf7ad36e68e48dffd10ecbca57eae6aa0db083208accd252bc3726a41442f7319e8e01c4fb7a85910569f534309e96473fd8f953d70f85cd18ed1cfc429f731489aa2fd1afe337583aef9fe7d7f86810b60e9e6a1d418ed1e5d4b793e4cd"}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @broadcast, 0x6, @device_b, 0x5, 0x7, @device_b, 0x3}}, @supported_rates={0x1, 0x3, [{0x5, 0x1}, {0x48}, {0x60, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x3d}}]}, @NL80211_ATTR_PROBE_RESP={0x312, 0x91, "d3d69bcd993e931e7f94f9b7c532c824ab391e6c4b7d1392763abe965ed4ab13617c043136dcafcaeeae0843ae826acf14035e3ee58c4f26f1fee3f41a1aa09c3b940b2ea9a05c2e2d9bacb13eddecc71841d999c299da6bfe0fd9f3e728b44cba983c396fa54752d353adc1d700b04907428c2924b74bf32232071c9782e848f3823a2482624a13b91e1a1dc5995d822a940532fc482b560e425fe62b7b2b2c561eb904a317fd6dfc4f1ea02b0182a386c7a84e03476ef514c2791f11bd2665ce1e35efc89a9e3ac78a050dbf4cfe9b072d5ffdaa3dbb80e708e4245df6ea7e8c1c11e22ee996e1dec03ed23a13bbdf8166a0ac3c34b74fe524bf4814f23b8c4a4cb800b468ad03027ac988b715432623a07e2835135e4940187c3c108785c36e37d27aca7da0c10482e754d583753ce8ad7d11c9872804c0f3227d2ef9d3ef9dc4dc437794557fe0c6ce0bfcf6ddfff7f18decebb847cf98f814a2ecf9410e81e1f9ff3d2151a4782190645f11e86f993b79e7de938a45a7e4f7340c76cb9240bf6a119457757344b85c0213d07366d704e16853449023050074d99094e02f17ee564b3da708a52a7caa43742a4c3af72076a3eb4d24aef01ddaea727ebeb9ca2adcea4635e6fcf6d8bdf4a5a2c3905b034fd4860fda77331a6214928d65ebb8036fff71bec765b0b8b7c85cb630da1e74f30a4a3fa0a48048de80600bf88f97144b6e8750a07907e687e447827584f6a9b20127575f189f79146e6fb7f27981358d3bf7121f82c9d66a0cc7456ea27f74b201e659deddb56455579b24a0a968d20b60b038779ac7b950c100b5b851160dcc630b56fe9c2896d090280b54b1d592be272b7fd7c76492afdad5b51dec479f4d457c50b3c7df36b7ee380a2449ec9d6db0c38e5d79f4b028a5b77746df969efe4f9de47d677128ac771db46caefae2328a09af73bdbfb2b1b2b67d5bf971f08719e4181306b50370926c287707d3335ae64833a0f8019edfb2ea22c7c5fc565400a19228092efdf455768debb7139627d237d12394964e3827aef00f9080bd356c489c15d5a70f9fe34387e287f8d778962148ac9df49ee80a82e2"}, @NL80211_ATTR_BEACON_HEAD={0x335, 0xe, {@with_ht, 0x0, @default, 0x202, @void, @val={0x1, 0x3, [{0xb}, {}, {0x1b}]}, @void, @val={0x4, 0x6, {0xfb, 0x9, 0x0, 0xff}}, @void, @val={0x5, 0xf6, {0x1, 0x1e, 0x4, "eb29b6b507856667e85817056cc18b000825e9f3c2bbf4fe7b16c7f429940b27c8bb8f1f267fd709721350423f525253130e90c2daa76f7a64e445f69dbace885b88409c79a9342aa9839cf23b8df875ab3c65fe4347f2001f8b773ec64105ba196121590bfd16e1a4f7401743bf4176577d338ce26fb29aa11f8b21ba067d73969b63e69b365a77069834e18f43476b49e72ac038ad4fd035d82bd1f97a2b608e3f98e5b3aedf8fb2075a0c92ee4aed9505cffdf700d61b0071a2fac71c9f1e27b01357afdf02c9606fb0865bd8bdd92e0c58db7df170d6edcce28f8cf5fed05cb5c2ad89f65eaffa9d1a18e39d65ad2953c9"}}, @val={0x25, 0x3, {0x1}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xd4, 0x0, 0x9}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, @val={0x76, 0x6, {0x5, 0x5, 0x0, 0x5}}, [{0xdd, 0xdc, "df60ba85bae848bceacc281558ee87f6794ae23edc99a82dfbdde91d104ae00eb7cf6e636446cb6cfc6b52749f01ff1cfb92928b95e11709649a60973fe912ef47c9cabc8857b7067dab5f98bb532f897eb53567b95e4a5ec9f70d46e2da218e6a4e5b784bfff1a1a725e4a67e148675c8e63affddb153ea846631f8c46c250f84cb5508ed9740738727a746644d6ca74f22d695ee5ee635ca5af6b984255c3e14cb533abd88fa9af83135acb6c918701970f43876740bc158ab953a8730e368d6d2f463fb06cb2c2248b17f3dab928814d596dbe2293acf9710cc1a"}, {0xdd, 0xfd, "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"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x131, 0x80, [@random_vendor={0xdd, 0x64, "e00801a7e37dc41f9098e919c07efd10b63cb46362b8add6af5747046e1b90c583df16648499b3e59d1b89ff80baaf38a2c030bcd1798f2af665afb8e33648644af8e4b23ed9a47c6554c75f3dae938aa8d37fd7700f52f863722f4490c7eb25199c5705"}, @random={0x2, 0x11, "f12e68c2249fc61c5f3b307efe7020f0dd"}, @mic={0x8c, 0x18, {0x0, "549d246416cf", @long="5f60c17cc8979b6d5cdad8278eea4f93"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val=0x36, @void}}, @ibss={0x6, 0x2, 0x101}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x7, 0x0, {0x5, 0x185b, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x3, 0x40}}, @measure_req={0x26, 0x70, {0x0, 0xff, 0x80, "fb3b860b5134e5990f6e76ef1f70b8f9a69205d04437c2fabe20e4c905f15cf3e4b6b604cee2796e51b73abd7e79854ebe19719e198ff57e59cbb3010f7dfab7c9aeca7135b8c1efd8bc8c82d6485c2f68ccc310f49c3cdd8fef82508ebb4e6b22df3a67ba194968c74cd6f131"}}]}, @NL80211_ATTR_BEACON_HEAD={0xea, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @from_mac=@device_b, {0x5, 0x1}}, @ver_80211n={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x1, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0x9}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x8, 0xe}}, @void, @void, @void, @void, [{0xdd, 0x94, "c3baf59cbd5136b2e43eb974791fa8512d5e563d0037ac0264706229e5ea025fe2b029862bd02cdf9349f97aa0c1737343785c4ceb293e78b4d9640625991a799dae6be3c9dab678bf2e50a2265920d691758c9dda8e3c091b5b81fa9876eac2f8f1423ba0ea9ff873a3989353961f9eb119fef2660e99296de6be07c86c9a5d2dec4191c1ce6157d502fdec0dee5c7babc00edc"}, {0xdd, 0x11, "f3004517221f7f0243ff5f6ad6a0770606"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x6, 0xbffd, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE={0x5e, 0x2a, [@measure_req={0x26, 0x58, {0x0, 0x0, 0x0, "128c39aab7dcac97a09f62d728bac552ecf2c417e915efbca914ae4cfc9d590590f843061abf31eae102ecf18a72bffc8b8028ca67882c10a6cd249a1c03bf70966d3d8223edad68a9a37b4422bbf7742836bb0f4d"}}]}, @NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast, @random="e6cbd834311a", {0x6, 0xff}}, 0x84f, @default, 0x0, @val, @void, @val={0x3, 0x1, 0xb2}, @void, @val={0x6, 0x2, 0x1000}, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x0, 0x0, 0xe0}}, @val={0x2d, 0x1a, {0x20, 0x0, 0x3, 0x0, {0x8, 0x69, 0x0, 0x316, 0x0, 0x1, 0x0, 0x1}}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, @void}}, @NL80211_ATTR_BEACON_HEAD={0x6c, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @random="e9012d241f5d"}, 0xffff, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{}]}, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff}}, @void}}]]}, @chandef_params]}, 0xec4}}, 0x0) 17:07:16 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000900)) [ 1268.248869][ T4137] can: request_module (can-proto-5) failed. 17:07:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x100}, 0x40) 17:07:16 executing program 3: r0 = socket$inet6(0x1c, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 1268.308301][ T4137] can: request_module (can-proto-5) failed. 17:07:16 executing program 1: pipe(&(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 17:07:16 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462d", 0x86, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:07:16 executing program 0: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) 17:07:16 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 17:07:16 executing program 5: r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000580), 0x4) 17:07:16 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) 17:07:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000000440)=""/131, 0x26, 0x83, 0x1}, 0x20) 17:07:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0}}, 0x0) 17:07:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 17:07:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x40) 17:07:16 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462d", 0x86, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 17:07:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000500) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfe6f) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x11}) 17:07:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 17:07:17 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) 17:07:17 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:07:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 17:07:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000440)=""/131, 0x0, 0x83}, 0x20) 17:07:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xb}]}}, &(0x7f0000000440)=""/131, 0x26, 0x83, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 17:07:17 executing program 1: socketpair(0x3, 0x80000, 0x0, &(0x7f00000004c0)) 17:07:17 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db8", 0x87, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:17 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 17:07:17 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4004480f, &(0x7f00000009c0)={0x0, 0x200}) 17:07:17 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000400)=[{}], 0x1, 0x2) 17:07:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x258, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x1}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 17:07:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x258, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x1}, {}, {}, 0x1}) 17:07:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 17:07:17 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_gettime(0x0, 0xffffffffffffffff) 17:07:17 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db8", 0x87, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:17 executing program 5: sysfs$2(0x2, 0x4ea7, &(0x7f0000000340)=""/255) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) r0 = socket(0x200040000000015, 0x805, 0xfffffffd) getsockopt(r0, 0x114, 0x2719, &(0x7f0000000040)=""/13, &(0x7f0000000000)=0x1849061a155ba8bb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe00}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}}, 0x0) 17:07:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x10, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 17:07:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000005e0021cb3ec48edf4f2b299354686eebdcc45f6556"], 0x68}}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17:07:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x1, 0x1, 0x401}, 0x14}}, 0x0) 17:07:17 executing program 5: r0 = syz_usb_connect(0x0, 0xab, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000e7b6210ac05008628680112030109029900010000000009040000010e0100000a2403b25a1b5b0c4b"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003120000001203"], 0x0, 0x0, 0x0}, 0x0) [ 1269.648069][ T8531] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1270.047828][ T8531] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.063795][ T8531] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1270.073380][ T8531] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1270.083133][ T8531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.106921][ T8531] usb 4-1: config 0 descriptor?? [ 1270.157686][T23409] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1270.397537][T23409] usb 6-1: Using ep0 maxpacket: 16 [ 1270.517932][T23409] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.528338][T23409] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.697657][T23409] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=68.28 [ 1270.706907][T23409] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1270.715791][T23409] usb 6-1: Product: syz [ 1270.720406][T23409] usb 6-1: Manufacturer: syz [ 1270.725067][T23409] usb 6-1: SerialNumber: syz [ 1270.737132][T23409] usb 6-1: config 0 descriptor?? [ 1270.997652][T23409] usb 6-1: Found UVC 0.00 device syz (05ac:8600) [ 1271.004882][T23409] usb 6-1: No valid video chain found. [ 1271.202929][T23409] usb 6-1: USB disconnect, device number 14 [ 1271.967439][T23409] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1272.227368][T23409] usb 6-1: Using ep0 maxpacket: 16 17:07:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') lseek(r0, 0x0, 0x3) 17:07:20 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db8", 0x87, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:20 executing program 2: socket(0x2, 0x0, 0x846) 17:07:20 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000200)='./file0\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') dup3(r1, r0, 0x0) 17:07:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000100)=""/223, &(0x7f0000000040)=0xdf) [ 1272.345723][T17186] usb 4-1: USB disconnect, device number 22 [ 1272.370930][T23409] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.413499][T23409] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 17:07:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getflags(r0, 0x400) 17:07:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4024800) [ 1272.499079][ T25] audit: type=1804 audit(1631984840.675:30): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/1327/file0/bus" dev="sda1" ino=13953 res=1 errno=0 17:07:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') dup2(r0, 0xffffffffffffffff) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000100)={0x0, 0x5, 0x1e}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={r6}) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:20 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/wireless\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x88440, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x154}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000280)={r8, 0x0, 0x5e, "fc2af67c088d02deb719557531d373dcfc1ddf45a3237077a615af7608ff87f48ff640a304504b7da51624e3bb3900bce7cfe4b8b7001bdf1e547e3dbf4ff0a9e281b787d5a1f41c539c5034bb6bc1222c99de9e08b9dc1f888f0d91b27a"}, 0x66) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000080)=0x2) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1272.627600][T23409] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=68.28 [ 1272.653001][T23409] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 17:07:20 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x0, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1272.677909][T23409] usb 6-1: Product: syz [ 1272.686305][T23409] usb 6-1: Manufacturer: syz [ 1272.698585][T23409] usb 6-1: SerialNumber: syz [ 1272.718411][T23409] usb 6-1: config 0 descriptor?? 17:07:21 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fadvise64(0xffffffffffffffff, 0x7ff, 0x3, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1272.979365][T23409] usb 6-1: Found UVC 0.00 device syz (05ac:8600) [ 1272.985861][T23409] usb 6-1: No valid video chain found. [ 1273.060525][T23409] usb 6-1: USB disconnect, device number 15 17:07:21 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x0, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:21 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x0, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000014c0)={0x9, "435f7db9100f4b2a3da22b2f51b0957ac6cf80bc6dec7554de84b8ac5a9be59e", 0x1, 0x81, 0x4, 0xff, 0x6000000, 0x2}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x110, r2, 0x12e69000) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000300)=""/50, 0x32}, 0x10100) socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012120, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:22 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x100000000]}, 0x8) accept4(r3, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:22 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0014040300000000400000000097ebadd01e85ea38f0deb30000359ad0423462157b8b10b76a380200050091acc4bdeb0bbde745576d60b80d54c1a899dce277d80bcd255b2d79685cb9cadef32c24e1fac7c8e5e6cd291ce93d4bf7d6fbce264cc70848e4067185475a22c9d7ccc28c401eafb17f77c624077ce84d17b98dc357cd20596fd4049d67aa2ae54be8886ad49d201506dc73fb1a1958ccb5e2f5684e3495a6c4863ecc8bce915cd890231d4ed855d8814b0455114f359c00df0f406965ea68f5717eeef1feeb08310c09a04583c1599dfd9f9000"/229, @ANYRES64, @ANYRES32=r5, @ANYRESDEC, @ANYRESDEC], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private2, 0x21, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001a00)=@bridge_newvlan={0x70, 0x70, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x404c840) fdatasync(r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000140)=""/121, 0x79}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f0000001700)=""/217, 0xd9}, {&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f0000000340)=""/51, 0x33}], 0xa, 0x7fff, 0x0) 17:07:22 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:23 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/xfrm_stat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:23 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x100000000]}, 0x8) accept4(r3, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:23 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:24 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:24 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x100000000]}, 0x8) accept4(r3, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:24 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/xfrm_stat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:24 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:24 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01", @ANYRES32=0x0], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:07:25 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x5000000) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:25 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e9", @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:25 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e3", @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:25 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:25 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:26 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c0", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:26 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002"], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) 17:07:26 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x4c00) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:26 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:27 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x2a}, {0xd}, {0x6}}}}}}]}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001c40)) close(r0) 17:07:27 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af76", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:27 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:27 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1279.647560][T23409] usb 3-1: new high-speed USB device number 20 using dummy_hcd 17:07:28 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1279.947174][T23409] usb 3-1: Using ep0 maxpacket: 32 17:07:28 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) [ 1280.098203][T23409] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.158198][T23409] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:07:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x4c00) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1280.245629][T23409] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1280.257795][T23409] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1280.276726][T23409] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1280.286419][T23409] usb 3-1: config 1 interface 1 has no altsetting 0 17:07:28 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:28 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002"], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) 17:07:28 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1280.476845][T23409] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1280.487195][T23409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.604366][T23409] usb 3-1: Product: syz [ 1280.622232][T23409] usb 3-1: Manufacturer: syz [ 1280.642616][T23409] usb 3-1: SerialNumber: syz 17:07:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x2a}, {0xd}, {0x6}}}}}}]}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000001c40)) syz_usb_connect$cdc_ncm(0x1, 0x82, &(0x7f00000014c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x7, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "548f662abb"}, {0x5, 0x24, 0x0, 0xf801}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x3, 0x3f}, {0x6, 0x24, 0x1a, 0x749, 0x28}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x4, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x70, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0x3, 0x2}}}}}}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x300, 0x81, 0x9, 0x0, 0x8, 0x8d}, 0x14b, &(0x7f00000015c0)={0x5, 0xf, 0x14b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x1, 0x5}, @generic={0xf4, 0x10, 0xb, "9c606becad6e8938555366c55e5a1dbaf238ead0dc23d021d7b512d9f5dddd9f65f4f357cdb05db24e0002ad5f5348423f2f6c4d621427a9e64dd6772b86f0a955b32dacc7fd78ea9b6d43b840f6883c75df768c44b07992766a6449e916772a597ac1c30f8aad43578cda6928cdd7884b941a7f980401ce00e789433a3575927365bb3d918e6576b15da361a3ea2532cb8fff4c714527bf4f75c5ee2076431ffeb3dc4ad856bdf25d89f649012ae84341c467e25de64c950fbf6a96e10e40c2d195761a4bc62dffe3e831f64c5160f07612d1e8e50d55dbab4ea1c31f75b39463287e8a2343ee52b260bdfec4299ef1f9"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x8, 0xf000, 0x91, [0x3f00, 0xf0, 0x7f7f30, 0x1fec000]}, @ssp_cap={0x18, 0x10, 0xa, 0xfa, 0x3, 0x6, 0x0, 0x1000, [0x0, 0x3fcf, 0xff00c0]}, @ssp_cap={0x14, 0x10, 0xa, 0xfd, 0x2, 0x100, 0x7800, 0x6, [0x3f30, 0xc0]}]}, 0xa, [{0x62, &(0x7f0000001740)=@string={0x62, 0x3, "248d06f199f0163b9fa7a7788891e85b8d7fc89ed516b647f9f058ad2ac0d90d52b7923be1022d5cf1910eea107ba6eae2addde9ab4f7ff0db274413c9534cddcd036d9c6688e313725d32bd4414b33e32ea621d679698123e4bd931eaecf477"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x40f}}, {0x2, &(0x7f00000018c0)=@string={0x2}}, {0xc8, &(0x7f0000001900)=@string={0xc8, 0x3, "672d7bd793cb08147ac720a671c0bc437bf7d4f70bd1944616134035e361088d087f7d2596a5529c76efcbb989c76e96ee96149cd15d651324bf9c6c1f556587124afb753d1e959b4bc419ce15180fef4dd507541d507c439fc334d6404010a301c913e9566d72629120d8f92ed42c81b3b434cd66e17a3f3b2c31e816dc0e70ee7cc7d634897f843705e25dc96df6b2f27da2f69478de89cdda44179034cdd3a688ed4bdba468703377acdd9d24e6a97484986af8775e1c7a512cd5e28847c8f972f86bba15"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x430}}, {0xdb, &(0x7f0000001a80)=@string={0xdb, 0x3, "c3bd223356e59c2440403ec9b6375c31b4ff6d94136b7f9a999a126fea1bbb5cccdca8d05e350fb8401bce049f098e230142febea60f5460f28c2282451fa077cbf3b088ed5ad38d8f61a0bbe5a82e9b2b2ae1a911381594a3577b05a5202f5d7baa9a8c20bddebbc21b254f5cb14eb0cb71bbd25e5b91334d82a2a495392c9dea1f91c9eddee909ce6ef17a138a0a49d5919dbbc502aa786e49714ddf461506c2c955b74799136610474f83e4d426bdf79c79de38eb89c6ae8616e46e4049e59a4852ec4da5bb42e11fd8573932e08f6549c4a3f8e384bc05"}}]}) close(r0) [ 1280.749400][T23409] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 1280.784624][T23409] cdc_ncm 3-1:1.0: bind() failure 17:07:29 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002"], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) [ 1281.137074][T17186] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1281.376798][T17186] usb 2-1: Using ep0 maxpacket: 32 [ 1281.497059][T17186] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1281.596632][T17186] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1281.606407][T17186] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1281.616937][T17186] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1281.627143][T17186] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1281.639147][T17186] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1281.796735][T17186] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.805814][T17186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.826581][T17186] usb 2-1: Product: syz [ 1281.830778][T17186] usb 2-1: Manufacturer: syz [ 1281.835361][T17186] usb 2-1: SerialNumber: syz [ 1281.897743][T17186] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1281.905189][T17186] cdc_ncm 2-1:1.0: bind() failure [ 1282.226205][ T4465] udc-core: couldn't find an available UDC or it's busy [ 1282.244362][ T4465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1282.706704][T17186] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 1282.736844][T17186] usb 2-1: USB disconnect, device number 17 17:07:31 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002"], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:07:31 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x4c00) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) 17:07:31 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) [ 1283.112759][T23409] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1283.149254][T23409] usb 3-1: USB disconnect, device number 20 17:07:31 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:31 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:07:31 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:32 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:32 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:33 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) 17:07:33 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) 17:07:33 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:33 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:33 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xff2, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:33 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:34 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:34 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xfea, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:34 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:35 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:35 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:35 executing program 4: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:35 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:36 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:36 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:36 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:36 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:36 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:37 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:37 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x2, r4}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r3, 0x400, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = eventfd2(0x0, 0x0) dup3(r5, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') 17:07:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xfcf, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:38 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:38 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:39 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:39 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:39 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6, 0x46, 0xd8, 0x40, 0x0, 0x6, 0xa8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0xffffffffffffff96}, 0xc400, 0x3, 0x81, 0x3, 0x9, 0x6, 0x0, 0x0, 0x81, 0x0, 0x7}, 0x0, 0x10, r0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'bond0\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5e, 0x8, 0x0, 0x7, 0x0, 0x2, 0x1800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x21d, 0x1, @perf_config_ext={0x100000000, 0xfffffffffffffffb}, 0x8200, 0x4, 0x6, 0x5, 0x8, 0x8, 0x6, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r1) 17:07:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:40 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:40 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r2) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = gettid() fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x2, r4}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r3, 0x400, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = eventfd2(0x0, 0x0) dup3(r5, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') 17:07:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x40050, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x398, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x19b00, 0x1, 0x0, 0x1, 0x100000001, 0x7, 0x7ff, 0x0, 0x6, 0x0, 0x71}, 0xffffffffffffffff, 0x6, r4, 0x0) fstatfs(r5, &(0x7f00000003c0)=""/127) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req={0x4d1, 0x0, 0x9, 0x3}, 0x10) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:41 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xfbd, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:41 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:41 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af76", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:42 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:42 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:43 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:43 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:43 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='schedstat\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x180, 0x7fff, 0x8, 0xe0f, 0x3997a6e4, r4}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r6, &(0x7f00000002c0)=""/171, 0xab, 0x10000, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:43 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:43 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:43 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e3", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:44 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e3", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:44 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:44 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:44 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:45 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:45 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:45 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:45 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:46 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:46 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:46 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:46 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:46 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:07:46 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:47 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:47 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1299.769175][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.775735][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 17:07:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, r2, {0x7, 0x0, 0x0, {0x8000000000000, 0x824a, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6000, 0x0, 0xffffffffffffffff}}}, 0x78) fallocate(r0, 0x100000003, 0x0, 0x80019c) 17:07:48 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:48 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getattr(0xffffffffffffffff, &(0x7f00000014c0)={0x38}, 0x76, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x100000000, 0x701002) r5 = dup2(r1, r2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000001440)={0x5, 0x5, 0x8, 0x10, 0xfffffffe, 0x5}) preadv(r6, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_submit(0x0, 0x4, &(0x7f0000001400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000200)="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", 0x1000, 0x7, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xad93, r4, &(0x7f0000001200)="5069c53332f938bfc98b4b13f7e48c2635f18622266e9135af4bce8f68841031547d59d499b50bf60bc95a7842eebc83e50c0d30b87d163debbda54f41b9154fbb9c72a099c35fa4bafa158217db261f5c74afbb6c3417c1cafb245f7890945c40215a8e71cc8f99d4d387cd", 0x6c, 0xffff, 0x0, 0x1, r5}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000001280)="d7e6ac9a33031137970919c001b723c7a2336d929c8d1dd123912eb1d5a4292d48f78f2a38f2bdeaa4d5670e5459d61308b51a8cb9aa8d8e47ad7063c3926ae704c1789be2d7d334e77a1931507f7268df7947f451bcd47a7a597e885a000d6349b5d8c2bb", 0x65, 0xdfd, 0x0, 0x1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001340)="0a3b9094c0e486bf8c963f82135a175e43ed380da5e0ad55a49e8e3f8e26d9c71043fef624de03eb5a6c2f07eefb4007c580f8b3e4ae18435bd1ebcf513260b83f671445dbf477ced2613e2de85505ddbaffff02726695fdea1ae4698a3cd8f703b2268ff5b541c16bdd", 0x6a, 0x91, 0x0, 0x1, r6}]) r8 = socket$kcm(0x2, 0xa, 0x2) gettid() ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r1) 17:07:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/nf_conntrack_expect\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) socket$l2tp(0x2, 0x2, 0x73) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f00000003c0)=0x80, 0x80800) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000240)=""/10, 0xa}, &(0x7f0000000280), 0x16}, 0xa0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff78, 0x40000000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:48 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:48 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:49 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:50 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:50 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:51 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:51 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x93, 0x4, 0x3, 0xf5, 0x0, 0x7fff, 0x5, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfff, 0x1}, 0x2, 0x4, 0x3, 0x1, 0x7c8, 0x7ff, 0x7ff, 0x0, 0x3, 0x0, 0x80000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x93, 0x4, 0x3, 0xf5, 0x0, 0x7fff, 0x5, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfff, 0x1}, 0x2, 0x4, 0x3, 0x1, 0x7c8, 0x7ff, 0x7ff, 0x0, 0x3, 0x0, 0x80000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:52 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/nf_conntrack_expect\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) socket$l2tp(0x2, 0x2, 0x73) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f00000003c0)=0x80, 0x80800) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@un=@file={0x0, './file0\x00'}, {&(0x7f0000000240)=""/10, 0xa}, &(0x7f0000000280), 0x16}, 0xa0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff78, 0x40000000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x93, 0x4, 0x3, 0xf5, 0x0, 0x7fff, 0x5, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfff, 0x1}, 0x2, 0x4, 0x3, 0x1, 0x7c8, 0x7ff, 0x7ff, 0x0, 0x3, 0x0, 0x80000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xfaf, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:53 executing program 1: mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r4) recvmmsg$unix(r3, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001780)=""/133, 0x85}, {&(0x7f0000001840)=""/200, 0xc8}, {&(0x7f0000001940)=""/29, 0x1d}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000001b00)=""/96, 0x60}, {&(0x7f0000001b80)=""/202, 0xca}, {&(0x7f0000001c80)=""/127, 0x7f}, {&(0x7f0000001d00)=""/160, 0xa0}, {&(0x7f0000001dc0)=""/240, 0xf0}, {&(0x7f0000000580)=""/224, 0xe0}], 0xa, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000003640)=[{&(0x7f0000002100)=""/182, 0xb6}, {&(0x7f0000005580)=""/250, 0xfa}, {&(0x7f00000022c0)=""/139, 0x8b}, {&(0x7f0000002380)=""/193, 0xc1}, {&(0x7f0000002480)=""/245, 0xf5}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/167, 0xa7}], 0x7, &(0x7f00000021c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/173, 0xad}, {&(0x7f0000003900)=""/231, 0xe7}], 0x2}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)=""/251, 0xfb}], 0x1, &(0x7f0000003c00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003cc0)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000003d80)=""/124, 0x7c}, {&(0x7f0000003e00)=""/111, 0x6f}], 0x3}}, {{&(0x7f0000003ec0)=@abs, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003f40)=""/120, 0x78}, {&(0x7f0000003fc0)=""/12, 0xc}, {&(0x7f0000004000)=""/146, 0x92}, {&(0x7f00000040c0)=""/250, 0xfa}, {&(0x7f0000005680)=""/4096, 0x1000}], 0x5}}], 0x7, 0x10000, 0x0) r8 = syz_open_procfs(r5, &(0x7f0000000240)='net/ip6_tables_matches\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r7, 0xc01064c1, &(0x7f0000005440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000005480)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000054c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000005540)={&(0x7f0000005500)=[0x0, 0x0, r9, 0x0, r10, 0x0, 0x0, r11, 0x0], 0x9}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:07:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:54 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:54 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:55 executing program 2: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:55 executing program 3: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:55 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:55 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:55 executing program 2: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:55 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0xfaa, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:55 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:55 executing program 2: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:56 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fdatasync(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:56 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:56 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:56 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, 0xffffffffffffffff, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:57 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 17:07:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:57 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fdatasync(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:57 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:57 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:58 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r2, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r3}, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:07:58 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:07:59 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:07:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) recvfrom(r3, &(0x7f0000000240)=""/68, 0x44, 0x40000000, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x7, @loopback, 0x7}}}, 0x80) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:00 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:00 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fdatasync(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:00 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:08:01 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) r2 = socket(0x5, 0x5, 0x6) sendmsg(r2, &(0x7f0000000300)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="cda8d5911ac6c8af29e92d37c8de6cb72e86b0a127373a9914537a9887175cda7bc7e59c9a98d1f507411a03285ab919e958d148c36b1d0c601f6d779e0c6437d0306ce59335b5591493d9eda277182722243ef41892309fb4207b594b3538a7256252df5fbc595871e3d45a47b671a19e9ddc28be22638e26ea2fbbd818a95e12506a0d8da728ce1f5f615605478a6a8ee95cd396ae53877d9b11ac94e156376f90cda8a01aa4b310731f0a2ba7e87ca971cb2c4323233e64811a9dc8956dc730f89235c5b04193a31cd0ca4ddde1810ab2e1e368e8e54db0283251b2baef29d817252d54b9d2676683a1639db72a3d3e2f", 0xf2}], 0x1}, 0x84003) 17:08:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:08:02 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:02 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fdatasync(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:02 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:03 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17:08:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:04 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:05 executing program 1 (fault-call:8 fault-nth:0): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:08:05 executing program 3 (fault-call:6 fault-nth:0): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:05 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:05 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1317.641762][ T5006] FAULT_INJECTION: forcing a failure. [ 1317.641762][ T5006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.663797][ T5006] CPU: 0 PID: 5006 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 1317.672522][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.682599][ T5006] Call Trace: [ 1317.685918][ T5006] dump_stack_lvl+0xcd/0x134 [ 1317.690544][ T5006] should_fail.cold+0x5/0xa [ 1317.695085][ T5006] _copy_from_user+0x2c/0x180 [ 1317.699791][ T5006] io_submit_one+0x91/0x1b80 [ 1317.704487][ T5006] ? find_held_lock+0x2d/0x110 [ 1317.709275][ T5006] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1317.716072][ T5006] ? __might_fault+0xd3/0x180 [ 1317.720844][ T5006] ? lock_downgrade+0x6e0/0x6e0 [ 1317.725738][ T5006] __x64_sys_io_submit+0x18c/0x330 [ 1317.730878][ T5006] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1317.736371][ T5006] ? syscall_enter_from_user_mode+0x21/0x70 [ 1317.742299][ T5006] do_syscall_64+0x35/0xb0 [ 1317.746746][ T5006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1317.752670][ T5006] RIP: 0033:0x7fe752657739 [ 1317.757102][ T5006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1317.773389][ T5010] FAULT_INJECTION: forcing a failure. [ 1317.773389][ T5010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.776755][ T5006] RSP: 002b:00007fe74fbce188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1317.776788][ T5006] RAX: ffffffffffffffda RBX: 00007fe75275bf80 RCX: 00007fe752657739 [ 1317.776807][ T5006] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fe75273f000 [ 1317.776826][ T5006] RBP: 00007fe74fbce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.776844][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.776861][ T5006] R13: 00007fe752c8fb1f R14: 00007fe74fbce300 R15: 0000000000022000 [ 1317.817592][ T5013] FAULT_INJECTION: forcing a failure. [ 1317.817592][ T5013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.859987][ T5010] CPU: 1 PID: 5010 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 1317.868722][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.878791][ T5010] Call Trace: [ 1317.882082][ T5010] dump_stack_lvl+0xcd/0x134 [ 1317.886695][ T5010] should_fail.cold+0x5/0xa [ 1317.891219][ T5010] _copy_from_user+0x2c/0x180 [ 1317.895912][ T5010] io_submit_one+0x91/0x1b80 [ 1317.900523][ T5010] ? irqentry_enter+0x28/0x50 [ 1317.905215][ T5010] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1317.911990][ T5010] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1317.918161][ T5010] ? lockdep_hardirqs_on+0x79/0x100 [ 1317.923368][ T5010] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1317.929544][ T5010] ? __x64_sys_io_submit+0x1d2/0x330 [ 1317.934839][ T5010] __x64_sys_io_submit+0x18c/0x330 [ 1317.939957][ T5010] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1317.945428][ T5010] ? syscall_enter_from_user_mode+0x21/0x70 [ 1317.951330][ T5010] do_syscall_64+0x35/0xb0 [ 1317.955754][ T5010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1317.961648][ T5010] RIP: 0033:0x7fb832755739 [ 1317.966067][ T5010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1317.985676][ T5010] RSP: 002b:00007fb82fccc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1317.994089][ T5010] RAX: ffffffffffffffda RBX: 00007fb832859f80 RCX: 00007fb832755739 [ 1318.002058][ T5010] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb83283d000 [ 1318.010028][ T5010] RBP: 00007fb82fccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.017999][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.025967][ T5010] R13: 00007fb832d8db1f R14: 00007fb82fccc300 R15: 0000000000022000 [ 1318.064980][ T5013] CPU: 1 PID: 5013 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1318.073712][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.083779][ T5013] Call Trace: [ 1318.087056][ T5013] dump_stack_lvl+0xcd/0x134 [ 1318.091651][ T5013] should_fail.cold+0x5/0xa [ 1318.096189][ T5013] _copy_from_user+0x2c/0x180 [ 1318.100871][ T5013] io_submit_one+0x91/0x1b80 [ 1318.105471][ T5013] ? find_held_lock+0x2d/0x110 [ 1318.110239][ T5013] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1318.117011][ T5013] ? __might_fault+0xd3/0x180 [ 1318.121690][ T5013] ? lock_downgrade+0x6e0/0x6e0 [ 1318.126555][ T5013] __x64_sys_io_submit+0x18c/0x330 [ 1318.131669][ T5013] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1318.137139][ T5013] ? syscall_enter_from_user_mode+0x21/0x70 [ 1318.143038][ T5013] do_syscall_64+0x35/0xb0 [ 1318.147459][ T5013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1318.153356][ T5013] RIP: 0033:0x7fb9c7c77739 [ 1318.157771][ T5013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1318.177379][ T5013] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1318.185790][ T5013] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1318.193756][ T5013] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1318.201723][ T5013] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.209690][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.217656][ T5013] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 17:08:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/211, 0xd3}, {0x0}, {0x0}, {0x0}], 0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000000)=0x80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x6180, 0x0) fdatasync(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) 17:08:06 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:06 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:06 executing program 3 (fault-call:6 fault-nth:1): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:06 executing program 1 (fault-call:8 fault-nth:1): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) [ 1318.469807][ T5021] FAULT_INJECTION: forcing a failure. [ 1318.469807][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.519976][ T5021] CPU: 0 PID: 5021 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 1318.528714][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.538790][ T5021] Call Trace: [ 1318.542085][ T5021] dump_stack_lvl+0xcd/0x134 [ 1318.546710][ T5021] should_fail.cold+0x5/0xa [ 1318.551252][ T5021] _copy_from_user+0x2c/0x180 [ 1318.552236][ T5027] FAULT_INJECTION: forcing a failure. [ 1318.552236][ T5027] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.555956][ T5021] kstrtouint_from_user+0xb5/0x240 [ 1318.556043][ T5021] ? kstrtou8_from_user+0x210/0x210 [ 1318.578950][ T5021] proc_fail_nth_write+0x79/0x220 [ 1318.584013][ T5021] ? proc_task_getattr+0x1f0/0x1f0 [ 1318.589159][ T5021] ? proc_task_getattr+0x1f0/0x1f0 [ 1318.594292][ T5021] vfs_write+0x28e/0xae0 [ 1318.598563][ T5021] ksys_write+0x12d/0x250 [ 1318.602912][ T5021] ? __ia32_sys_read+0xb0/0xb0 [ 1318.607699][ T5021] ? syscall_enter_from_user_mode+0x21/0x70 [ 1318.613626][ T5021] do_syscall_64+0x35/0xb0 [ 1318.618068][ T5021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1318.623991][ T5021] RIP: 0033:0x7fe75260a41f [ 1318.628421][ T5021] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1318.648054][ T5021] RSP: 002b:00007fe74fbad170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1318.656495][ T5021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe75260a41f 17:08:06 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1318.664488][ T5021] RDX: 0000000000000001 RSI: 00007fe74fbad1e0 RDI: 0000000000000004 [ 1318.672472][ T5021] RBP: 00007fe74fbad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.680460][ T5021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1318.688448][ T5021] R13: 00007fe752c8fb1f R14: 00007fe74fbad300 R15: 0000000000022000 [ 1318.717708][ T5027] CPU: 1 PID: 5027 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1318.726435][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.736512][ T5027] Call Trace: [ 1318.739801][ T5027] dump_stack_lvl+0xcd/0x134 [ 1318.744415][ T5027] should_fail.cold+0x5/0xa [ 1318.748951][ T5027] ? io_submit_one+0xfd/0x1b80 [ 1318.749112][ T5028] FAULT_INJECTION: forcing a failure. [ 1318.749112][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.753737][ T5027] should_failslab+0x5/0x10 [ 1318.753778][ T5027] kmem_cache_alloc+0x5e/0x390 [ 1318.753818][ T5027] io_submit_one+0xfd/0x1b80 [ 1318.753854][ T5027] ? find_held_lock+0x2d/0x110 [ 1318.753882][ T5027] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1318.753915][ T5027] ? __might_fault+0xd3/0x180 [ 1318.753945][ T5027] ? lock_downgrade+0x6e0/0x6e0 [ 1318.753992][ T5027] __x64_sys_io_submit+0x18c/0x330 [ 1318.754024][ T5027] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1318.754065][ T5027] ? syscall_enter_from_user_mode+0x21/0x70 [ 1318.754102][ T5027] do_syscall_64+0x35/0xb0 [ 1318.754134][ T5027] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1318.754166][ T5027] RIP: 0033:0x7fb9c7c77739 [ 1318.754190][ T5027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1318.754216][ T5027] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 17:08:07 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) [ 1318.754244][ T5027] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1318.754264][ T5027] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1318.754282][ T5027] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.754298][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.754316][ T5027] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 [ 1318.972893][ T5028] CPU: 0 PID: 5028 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 1318.981629][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.991709][ T5028] Call Trace: [ 1318.995003][ T5028] dump_stack_lvl+0xcd/0x134 [ 1318.999622][ T5028] should_fail.cold+0x5/0xa [ 1319.004159][ T5028] ? io_submit_one+0xfd/0x1b80 [ 1319.008948][ T5028] should_failslab+0x5/0x10 [ 1319.013479][ T5028] kmem_cache_alloc+0x5e/0x390 [ 1319.018272][ T5028] io_submit_one+0xfd/0x1b80 [ 1319.022896][ T5028] ? find_held_lock+0x2d/0x110 [ 1319.027686][ T5028] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1319.034476][ T5028] ? __might_fault+0xd3/0x180 [ 1319.039175][ T5028] ? lock_downgrade+0x6e0/0x6e0 [ 1319.044064][ T5028] __x64_sys_io_submit+0x18c/0x330 [ 1319.049216][ T5028] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1319.054705][ T5028] ? syscall_enter_from_user_mode+0x21/0x70 [ 1319.060626][ T5028] do_syscall_64+0x35/0xb0 [ 1319.065067][ T5028] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1319.070988][ T5028] RIP: 0033:0x7fb832755739 [ 1319.075420][ T5028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.095052][ T5028] RSP: 002b:00007fb82fccc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1319.103494][ T5028] RAX: ffffffffffffffda RBX: 00007fb832859f80 RCX: 00007fb832755739 [ 1319.111488][ T5028] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb83283d000 17:08:07 executing program 3 (fault-call:6 fault-nth:2): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1319.119480][ T5028] RBP: 00007fb82fccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.127470][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.135456][ T5028] R13: 00007fb832d8db1f R14: 00007fb82fccc300 R15: 0000000000022000 [ 1319.195588][ T5038] FAULT_INJECTION: forcing a failure. [ 1319.195588][ T5038] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1319.221924][ T5038] CPU: 1 PID: 5038 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1319.230652][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.240721][ T5038] Call Trace: [ 1319.244018][ T5038] dump_stack_lvl+0xcd/0x134 [ 1319.248634][ T5038] should_fail.cold+0x5/0xa [ 1319.253169][ T5038] prepare_alloc_pages+0x17b/0x580 [ 1319.258346][ T5038] __alloc_pages+0x12f/0x500 [ 1319.262962][ T5038] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 1319.269745][ T5038] ? aa_path_link+0x2f0/0x2f0 [ 1319.274448][ T5038] ? stack_trace_consume_entry+0x160/0x160 [ 1319.280287][ T5038] alloc_pages+0x1a7/0x300 [ 1319.284726][ T5038] kmalloc_order+0x34/0xf0 [ 1319.289171][ T5038] kmalloc_order_trace+0x14/0x120 [ 1319.294224][ T5038] qrtr_tun_write_iter+0xbf/0x1a0 [ 1319.299277][ T5038] aio_write+0x350/0x7a0 [ 1319.303541][ T5038] ? aio_poll_queue_proc+0x100/0x100 [ 1319.308869][ T5038] ? __might_fault+0xd3/0x180 [ 1319.313577][ T5038] ? lock_downgrade+0x6e0/0x6e0 [ 1319.318470][ T5038] io_submit_one+0xe09/0x1b80 [ 1319.323174][ T5038] ? find_held_lock+0x2d/0x110 [ 1319.327952][ T5038] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1319.334737][ T5038] ? __might_fault+0xd3/0x180 [ 1319.339435][ T5038] ? lock_downgrade+0x6e0/0x6e0 [ 1319.344327][ T5038] __x64_sys_io_submit+0x18c/0x330 [ 1319.349465][ T5038] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1319.354954][ T5038] ? syscall_enter_from_user_mode+0x21/0x70 [ 1319.360875][ T5038] do_syscall_64+0x35/0xb0 [ 1319.365319][ T5038] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1319.371241][ T5038] RIP: 0033:0x7fb9c7c77739 [ 1319.375675][ T5038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.395307][ T5038] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1319.403758][ T5038] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1319.411745][ T5038] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1319.419726][ T5038] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.427713][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.435696][ T5038] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 17:08:07 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:07 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:07 executing program 1 (fault-call:8 fault-nth:2): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:08:07 executing program 3 (fault-call:6 fault-nth:3): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1319.697420][ T5043] FAULT_INJECTION: forcing a failure. [ 1319.697420][ T5043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1319.756682][ T5043] CPU: 0 PID: 5043 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 1319.765419][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.775499][ T5043] Call Trace: [ 1319.778794][ T5043] dump_stack_lvl+0xcd/0x134 [ 1319.783409][ T5043] should_fail.cold+0x5/0xa [ 1319.787935][ T5043] prepare_alloc_pages+0x17b/0x580 [ 1319.793076][ T5043] __alloc_pages+0x12f/0x500 [ 1319.797687][ T5043] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 1319.804479][ T5043] ? lockdep_hardirqs_on+0x79/0x100 [ 1319.809703][ T5043] ? alloc_pages+0x35/0x300 [ 1319.814228][ T5043] ? alloc_pages+0x82/0x300 [ 1319.818750][ T5043] alloc_pages+0x1a7/0x300 [ 1319.823189][ T5043] kmalloc_order+0x34/0xf0 [ 1319.827629][ T5043] kmalloc_order_trace+0x14/0x120 [ 1319.832677][ T5043] qrtr_tun_write_iter+0xbf/0x1a0 [ 1319.837732][ T5043] aio_write+0x350/0x7a0 [ 1319.841997][ T5043] ? aio_poll_queue_proc+0x100/0x100 [ 1319.847323][ T5043] ? lockdep_hardirqs_on+0x79/0x100 [ 1319.852553][ T5043] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1319.858740][ T5043] ? io_submit_one+0x478/0x1b80 [ 1319.863620][ T5043] io_submit_one+0xe09/0x1b80 [ 1319.868336][ T5043] ? find_held_lock+0x2d/0x110 [ 1319.873130][ T5043] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1319.879929][ T5043] ? __might_fault+0xd3/0x180 [ 1319.884634][ T5043] ? lock_downgrade+0x6e0/0x6e0 [ 1319.889529][ T5043] __x64_sys_io_submit+0x18c/0x330 [ 1319.894668][ T5043] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1319.900147][ T5043] ? trace_hardirqs_on+0x38/0x1c0 [ 1319.905203][ T5043] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1319.911130][ T5043] do_syscall_64+0x35/0xb0 [ 1319.915579][ T5043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1319.921500][ T5043] RIP: 0033:0x7fb832755739 [ 1319.925934][ T5043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.945568][ T5043] RSP: 002b:00007fb82fccc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 17:08:08 executing program 2 (fault-call:8 fault-nth:0): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:08 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:08 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1319.954015][ T5043] RAX: ffffffffffffffda RBX: 00007fb832859f80 RCX: 00007fb832755739 [ 1319.962012][ T5043] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb83283d000 [ 1319.970004][ T5043] RBP: 00007fb82fccc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.978001][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.986009][ T5043] R13: 00007fb832d8db1f R14: 00007fb82fccc300 R15: 0000000000022000 [ 1319.989017][ T5048] FAULT_INJECTION: forcing a failure. [ 1319.989017][ T5048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.057901][ T5048] CPU: 0 PID: 5048 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1320.066634][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.076714][ T5048] Call Trace: [ 1320.080014][ T5048] dump_stack_lvl+0xcd/0x134 [ 1320.084645][ T5048] should_fail.cold+0x5/0xa [ 1320.089189][ T5048] _copy_from_iter+0x389/0x1320 [ 1320.094086][ T5048] ? hash_and_copy_to_iter+0x200/0x200 [ 1320.099583][ T5048] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1320.105858][ T5048] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1320.112133][ T5048] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1320.118574][ T5048] ? __phys_addr+0xc4/0x140 [ 1320.123183][ T5048] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1320.129452][ T5048] ? __phys_addr_symbol+0x2c/0x70 [ 1320.134499][ T5048] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1320.140245][ T5048] ? __check_object_size+0x16e/0x3f0 [ 1320.145566][ T5048] qrtr_tun_write_iter+0xff/0x1a0 [ 1320.150620][ T5048] aio_write+0x350/0x7a0 [ 1320.154891][ T5048] ? aio_poll_queue_proc+0x100/0x100 [ 1320.160218][ T5048] ? __might_fault+0xd3/0x180 [ 1320.164928][ T5048] ? lock_downgrade+0x6e0/0x6e0 [ 1320.169812][ T5048] io_submit_one+0xe09/0x1b80 [ 1320.169898][ T5052] FAULT_INJECTION: forcing a failure. [ 1320.169898][ T5052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.174519][ T5048] ? find_held_lock+0x2d/0x110 [ 1320.174551][ T5048] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1320.174586][ T5048] ? __might_fault+0xd3/0x180 [ 1320.174619][ T5048] ? lock_downgrade+0x6e0/0x6e0 [ 1320.208651][ T5048] __x64_sys_io_submit+0x18c/0x330 [ 1320.213798][ T5048] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1320.219298][ T5048] ? syscall_enter_from_user_mode+0x21/0x70 [ 1320.225309][ T5048] do_syscall_64+0x35/0xb0 [ 1320.229755][ T5048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1320.235673][ T5048] RIP: 0033:0x7fb9c7c77739 [ 1320.240101][ T5048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1320.259729][ T5048] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1320.268166][ T5048] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1320.276150][ T5048] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1320.284131][ T5048] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.292113][ T5048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.300094][ T5048] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 [ 1320.308117][ T5052] CPU: 1 PID: 5052 Comm: syz-executor.2 Not tainted 5.15.0-rc1-syzkaller #0 [ 1320.316821][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.326900][ T5052] Call Trace: [ 1320.330196][ T5052] dump_stack_lvl+0xcd/0x134 [ 1320.334810][ T5052] should_fail.cold+0x5/0xa [ 1320.339341][ T5052] _copy_from_user+0x2c/0x180 [ 1320.344041][ T5052] io_submit_one+0x91/0x1b80 [ 1320.348665][ T5052] ? find_held_lock+0x2d/0x110 [ 1320.353449][ T5052] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1320.360279][ T5052] ? __might_fault+0xd3/0x180 [ 1320.364978][ T5052] ? lock_downgrade+0x6e0/0x6e0 [ 1320.369867][ T5052] __x64_sys_io_submit+0x18c/0x330 [ 1320.375008][ T5052] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1320.380509][ T5052] ? syscall_enter_from_user_mode+0x21/0x70 [ 1320.386439][ T5052] do_syscall_64+0x35/0xb0 [ 1320.390900][ T5052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1320.396813][ T5052] RIP: 0033:0x7f516dc58739 [ 1320.401267][ T5052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1320.420897][ T5052] RSP: 002b:00007f516b1cf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1320.429334][ T5052] RAX: ffffffffffffffda RBX: 00007f516dd5cf80 RCX: 00007f516dc58739 [ 1320.437326][ T5052] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007f516dd40000 [ 1320.445316][ T5052] RBP: 00007f516b1cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.453291][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.461260][ T5052] R13: 00007f516e290b1f R14: 00007f516b1cf300 R15: 0000000000022000 17:08:08 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:08 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:08:08 executing program 3 (fault-call:6 fault-nth:4): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:08 executing program 2 (fault-call:8 fault-nth:1): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) [ 1320.803433][ T5068] FAULT_INJECTION: forcing a failure. [ 1320.803433][ T5068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1320.917617][ T5068] CPU: 1 PID: 5068 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1320.926344][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.930406][ T5074] FAULT_INJECTION: forcing a failure. [ 1320.930406][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.936410][ T5068] Call Trace: [ 1320.936529][ T5068] dump_stack_lvl+0xcd/0x134 [ 1320.936564][ T5068] should_fail.cold+0x5/0xa [ 1320.961519][ T5068] prepare_alloc_pages+0x17b/0x580 [ 1320.966660][ T5068] ? lock_chain_count+0x20/0x20 [ 1320.971545][ T5068] __alloc_pages+0x12f/0x500 [ 1320.976158][ T5068] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 1320.982964][ T5068] ? __lock_acquire+0xbc2/0x54a0 [ 1320.987925][ T5068] alloc_pages+0x1a7/0x300 [ 1320.992364][ T5068] pte_alloc_one+0x16/0x230 [ 1320.996889][ T5068] __do_fault+0x2a9/0x4e0 [ 1321.001250][ T5068] __handle_mm_fault+0x28ff/0x5320 [ 1321.006402][ T5068] ? vm_iomap_memory+0x190/0x190 [ 1321.011390][ T5068] handle_mm_fault+0x1c8/0x790 [ 1321.016187][ T5068] do_user_addr_fault+0x48b/0x11c0 [ 1321.021336][ T5068] exc_page_fault+0x9e/0x180 [ 1321.025948][ T5068] asm_exc_page_fault+0x1e/0x30 [ 1321.030820][ T5068] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 1321.037458][ T5068] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 1321.057076][ T5068] RSP: 0018:ffffc90005967990 EFLAGS: 00010206 [ 1321.063153][ T5068] RAX: 0000000000000001 RBX: 0000000000400000 RCX: 00000000002001c0 [ 1321.071136][ T5068] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff88808b9ffe40 [ 1321.079123][ T5068] RBP: ffff88808b800000 R08: 0000000000000001 R09: ffff88808bbfffff [ 1321.087110][ T5068] R10: ffffed101177ffff R11: 0000000000000000 R12: 00000000200001c0 [ 1321.095103][ T5068] R13: 00000000204001c0 R14: 0000000000000000 R15: ffffc90005967be0 [ 1321.103115][ T5068] copyin.part.0+0xe4/0x110 [ 1321.107650][ T5068] _copy_from_iter+0x2a3/0x1320 [ 1321.112533][ T5068] ? hash_and_copy_to_iter+0x200/0x200 [ 1321.118018][ T5068] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1321.124282][ T5068] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1321.130545][ T5068] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1321.136801][ T5068] ? __phys_addr+0xc4/0x140 [ 1321.141324][ T5068] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1321.147583][ T5068] ? __phys_addr_symbol+0x2c/0x70 [ 1321.152629][ T5068] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1321.158371][ T5068] ? __check_object_size+0x16e/0x3f0 [ 1321.163692][ T5068] qrtr_tun_write_iter+0xff/0x1a0 [ 1321.168748][ T5068] aio_write+0x350/0x7a0 [ 1321.173015][ T5068] ? aio_poll_queue_proc+0x100/0x100 [ 1321.178339][ T5068] ? __might_fault+0xd3/0x180 [ 1321.183043][ T5068] ? lock_downgrade+0x6e0/0x6e0 [ 1321.187937][ T5068] io_submit_one+0xe09/0x1b80 [ 1321.192648][ T5068] ? find_held_lock+0x2d/0x110 [ 1321.197433][ T5068] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1321.204220][ T5068] ? __might_fault+0xd3/0x180 [ 1321.208921][ T5068] ? lock_downgrade+0x6e0/0x6e0 [ 1321.213801][ T5068] __x64_sys_io_submit+0x18c/0x330 [ 1321.218926][ T5068] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1321.224401][ T5068] ? syscall_enter_from_user_mode+0x21/0x70 [ 1321.230396][ T5068] do_syscall_64+0x35/0xb0 [ 1321.234824][ T5068] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1321.240726][ T5068] RIP: 0033:0x7fb9c7c77739 [ 1321.245149][ T5068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.264772][ T5068] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1321.273199][ T5068] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1321.281180][ T5068] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1321.289155][ T5068] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.297135][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.305117][ T5068] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 [ 1321.324401][ T5074] CPU: 0 PID: 5074 Comm: syz-executor.2 Not tainted 5.15.0-rc1-syzkaller #0 [ 1321.333123][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.343190][ T5074] Call Trace: [ 1321.346484][ T5074] dump_stack_lvl+0xcd/0x134 [ 1321.351103][ T5074] should_fail.cold+0x5/0xa [ 1321.355645][ T5074] ? io_submit_one+0xfd/0x1b80 [ 1321.360444][ T5074] should_failslab+0x5/0x10 [ 1321.364975][ T5074] kmem_cache_alloc+0x5e/0x390 [ 1321.369773][ T5074] io_submit_one+0xfd/0x1b80 [ 1321.374397][ T5074] ? find_held_lock+0x2d/0x110 [ 1321.379177][ T5074] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1321.385963][ T5074] ? __might_fault+0xd3/0x180 [ 1321.390659][ T5074] ? lock_downgrade+0x6e0/0x6e0 [ 1321.395545][ T5074] __x64_sys_io_submit+0x18c/0x330 [ 1321.400676][ T5074] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1321.406167][ T5074] ? syscall_enter_from_user_mode+0x21/0x70 [ 1321.412088][ T5074] do_syscall_64+0x35/0xb0 [ 1321.416528][ T5074] entry_SYSCALL_64_after_hwframe+0x44/0xae 17:08:09 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1321.422440][ T5074] RIP: 0033:0x7f516dc58739 [ 1321.426873][ T5074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.446501][ T5074] RSP: 002b:00007f516b1ae188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1321.454940][ T5074] RAX: ffffffffffffffda RBX: 00007f516dd5d038 RCX: 00007f516dc58739 [ 1321.462932][ T5074] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007f516dd40000 17:08:09 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1321.470923][ T5074] RBP: 00007f516b1ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.478915][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.486911][ T5074] R13: 00007f516e290b1f R14: 00007f516b1ae300 R15: 0000000000022000 17:08:09 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) 17:08:09 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x4, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:09 executing program 3 (fault-call:6 fault-nth:5): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:10 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) [ 1321.898521][ T5086] FAULT_INJECTION: forcing a failure. [ 1321.898521][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.920120][ T5086] CPU: 0 PID: 5086 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1321.928845][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.938917][ T5086] Call Trace: [ 1321.942214][ T5086] dump_stack_lvl+0xcd/0x134 [ 1321.946832][ T5086] should_fail.cold+0x5/0xa [ 1321.951370][ T5086] ? ptlock_alloc+0x1d/0x70 [ 1321.955896][ T5086] should_failslab+0x5/0x10 [ 1321.960424][ T5086] kmem_cache_alloc+0x5e/0x390 [ 1321.965222][ T5086] ptlock_alloc+0x1d/0x70 [ 1321.969576][ T5086] pte_alloc_one+0x68/0x230 [ 1321.974107][ T5086] __do_fault+0x2a9/0x4e0 [ 1321.978472][ T5086] __handle_mm_fault+0x28ff/0x5320 [ 1321.983622][ T5086] ? vm_iomap_memory+0x190/0x190 [ 1321.988624][ T5086] handle_mm_fault+0x1c8/0x790 [ 1321.993428][ T5086] do_user_addr_fault+0x48b/0x11c0 [ 1321.998572][ T5086] exc_page_fault+0x9e/0x180 [ 1322.003185][ T5086] asm_exc_page_fault+0x1e/0x30 [ 1322.008056][ T5086] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 1322.014671][ T5086] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 1322.034296][ T5086] RSP: 0018:ffffc9000547f990 EFLAGS: 00010206 [ 1322.040387][ T5086] RAX: 0000000000000001 RBX: 0000000000400000 RCX: 00000000002001c0 [ 1322.048375][ T5086] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff88808c9ffe40 [ 1322.056369][ T5086] RBP: ffff88808c800000 R08: 0000000000000001 R09: ffff88808cbfffff [ 1322.064358][ T5086] R10: ffffed101197ffff R11: 0000000000000000 R12: 00000000200001c0 [ 1322.072345][ T5086] R13: 00000000204001c0 R14: 0000000000000000 R15: ffffc9000547fbe0 [ 1322.080385][ T5086] copyin.part.0+0xe4/0x110 [ 1322.084922][ T5086] _copy_from_iter+0x2a3/0x1320 [ 1322.089806][ T5086] ? hash_and_copy_to_iter+0x200/0x200 [ 1322.095288][ T5086] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1322.101555][ T5086] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1322.107817][ T5086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1322.114082][ T5086] ? __phys_addr+0xc4/0x140 [ 1322.118606][ T5086] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1322.124873][ T5086] ? __phys_addr_symbol+0x2c/0x70 [ 1322.129916][ T5086] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1322.135658][ T5086] ? __check_object_size+0x16e/0x3f0 [ 1322.140973][ T5086] qrtr_tun_write_iter+0xff/0x1a0 [ 1322.146026][ T5086] aio_write+0x350/0x7a0 [ 1322.150291][ T5086] ? aio_poll_queue_proc+0x100/0x100 [ 1322.155611][ T5086] ? __might_fault+0xd3/0x180 [ 1322.160319][ T5086] ? lock_downgrade+0x6e0/0x6e0 [ 1322.165216][ T5086] io_submit_one+0xe09/0x1b80 [ 1322.169922][ T5086] ? find_held_lock+0x2d/0x110 [ 1322.174702][ T5086] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1322.181491][ T5086] ? __might_fault+0xd3/0x180 [ 1322.186190][ T5086] ? lock_downgrade+0x6e0/0x6e0 [ 1322.191083][ T5086] __x64_sys_io_submit+0x18c/0x330 [ 1322.196216][ T5086] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1322.201708][ T5086] ? syscall_enter_from_user_mode+0x21/0x70 [ 1322.207629][ T5086] do_syscall_64+0x35/0xb0 [ 1322.212078][ T5086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1322.217995][ T5086] RIP: 0033:0x7fb9c7c77739 [ 1322.222422][ T5086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.242049][ T5086] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1322.250485][ T5086] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1322.258470][ T5086] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1322.266455][ T5086] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.274436][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.282426][ T5086] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 17:08:10 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x5, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:10 executing program 3 (fault-call:6 fault-nth:6): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:10 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000001c0000020000000000020800030021c713d55e30e993d3eba9cfa00ee4ef2b3be286989b2e6cd93673d17aa024336f45d74b13cb599e8ce36abcbe42a1cf241255fa43d86be005b7b6227ed4add560c06ed2e8c6e0f0bff83f8e959db1e32c265f2b40247b7a27dc91228886071f24d7053947ca122adfff12897ca73e0d5eccabe4b831d76763ab387508b1fe3e32995bc0b0f5ccf8ce28b86817047cdb1893a4594ab249407a7d154d63aab3987f18fcf0af761cee3ca5585daae5f437c002", @ANYRES32=0x0, @ANYBLOB='\b\x00k\x007\x00\x00\x00'], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x2010, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2, r4}, &(0x7f0000000180)) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x0, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) [ 1322.792956][ T5099] FAULT_INJECTION: forcing a failure. [ 1322.792956][ T5099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1322.819136][ T5099] CPU: 0 PID: 5099 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1322.827868][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.837946][ T5099] Call Trace: 17:08:11 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 17:08:11 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1322.841241][ T5099] dump_stack_lvl+0xcd/0x134 [ 1322.845863][ T5099] should_fail.cold+0x5/0xa [ 1322.850407][ T5099] prepare_alloc_pages+0x17b/0x580 [ 1322.855555][ T5099] __alloc_pages+0x12f/0x500 [ 1322.860177][ T5099] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 1322.866971][ T5099] ? lock_release+0x720/0x720 [ 1322.871694][ T5099] alloc_pages+0x1a7/0x300 [ 1322.876139][ T5099] pte_alloc_one+0x16/0x230 [ 1322.880666][ T5099] __pte_alloc+0x1f/0x2d0 [ 1322.885025][ T5099] __get_locked_pte+0x2e6/0x4d0 [ 1322.889907][ T5099] vm_insert_page+0x3e1/0xb40 [ 1322.894616][ T5099] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 1322.900194][ T5099] ? mark_held_locks+0x9f/0xe0 [ 1322.904990][ T5099] drm_gem_shmem_fault+0x1df/0x2d0 [ 1322.910204][ T5099] __do_fault+0x10d/0x4e0 [ 1322.914566][ T5099] __handle_mm_fault+0x28ff/0x5320 [ 1322.919719][ T5099] ? vm_iomap_memory+0x190/0x190 [ 1322.924719][ T5099] handle_mm_fault+0x1c8/0x790 [ 1322.929520][ T5099] do_user_addr_fault+0x48b/0x11c0 [ 1322.934662][ T5099] exc_page_fault+0x9e/0x180 [ 1322.939275][ T5099] asm_exc_page_fault+0x1e/0x30 [ 1322.944148][ T5099] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 1322.950762][ T5099] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 1322.970393][ T5099] RSP: 0018:ffffc90005a97990 EFLAGS: 00010206 [ 1322.976481][ T5099] RAX: 0000000000000001 RBX: 0000000000400000 RCX: 00000000002001c0 [ 1322.984469][ T5099] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff88808c9ffe40 [ 1322.992455][ T5099] RBP: ffff88808c800000 R08: 0000000000000001 R09: ffff88808cbfffff [ 1323.000444][ T5099] R10: ffffed101197ffff R11: 0000000000000000 R12: 00000000200001c0 [ 1323.008431][ T5099] R13: 00000000204001c0 R14: 0000000000000000 R15: ffffc90005a97be0 [ 1323.016443][ T5099] copyin.part.0+0xe4/0x110 [ 1323.020990][ T5099] _copy_from_iter+0x2a3/0x1320 [ 1323.025884][ T5099] ? hash_and_copy_to_iter+0x200/0x200 [ 1323.031376][ T5099] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1323.037641][ T5099] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1323.043904][ T5099] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1323.050167][ T5099] ? __phys_addr+0xc4/0x140 [ 1323.054688][ T5099] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1323.060949][ T5099] ? __phys_addr_symbol+0x2c/0x70 [ 1323.066005][ T5099] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1323.071756][ T5099] ? __check_object_size+0x16e/0x3f0 [ 1323.077069][ T5099] qrtr_tun_write_iter+0xff/0x1a0 [ 1323.082133][ T5099] aio_write+0x350/0x7a0 [ 1323.086397][ T5099] ? aio_poll_queue_proc+0x100/0x100 [ 1323.091724][ T5099] ? __might_fault+0xd3/0x180 [ 1323.096430][ T5099] ? lock_downgrade+0x6e0/0x6e0 [ 1323.101321][ T5099] io_submit_one+0xe09/0x1b80 [ 1323.106029][ T5099] ? find_held_lock+0x2d/0x110 [ 1323.110815][ T5099] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1323.117611][ T5099] ? __might_fault+0xd3/0x180 [ 1323.122323][ T5099] ? lock_downgrade+0x6e0/0x6e0 [ 1323.127221][ T5099] __x64_sys_io_submit+0x18c/0x330 [ 1323.132363][ T5099] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1323.137860][ T5099] ? syscall_enter_from_user_mode+0x21/0x70 [ 1323.143803][ T5099] do_syscall_64+0x35/0xb0 [ 1323.148246][ T5099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.154164][ T5099] RIP: 0033:0x7fb9c7c77739 [ 1323.158599][ T5099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.178236][ T5099] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1323.186680][ T5099] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1323.194681][ T5099] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 [ 1323.202670][ T5099] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.210661][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.218652][ T5099] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 17:08:11 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:11 executing program 3 (fault-call:6 fault-nth:7): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 17:08:11 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x7, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) [ 1323.812752][ T5113] ------------[ cut here ]------------ [ 1323.828297][ T5113] WARNING: CPU: 0 PID: 5113 at drivers/gpu/drm/drm_gem_shmem_helper.c:562 drm_gem_shmem_vm_open+0x96/0xb0 [ 1323.845084][ T5119] FAULT_INJECTION: forcing a failure. [ 1323.845084][ T5119] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.858116][ T5119] CPU: 0 PID: 5119 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1323.866817][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.876891][ T5119] Call Trace: [ 1323.880186][ T5119] dump_stack_lvl+0xcd/0x134 [ 1323.884800][ T5119] should_fail.cold+0x5/0xa [ 1323.889331][ T5119] ? ptlock_alloc+0x1d/0x70 [ 1323.893852][ T5119] should_failslab+0x5/0x10 [ 1323.898382][ T5119] kmem_cache_alloc+0x5e/0x390 [ 1323.903182][ T5119] ptlock_alloc+0x1d/0x70 [ 1323.907531][ T5119] pte_alloc_one+0x68/0x230 [ 1323.912057][ T5119] __pte_alloc+0x1f/0x2d0 [ 1323.916414][ T5119] __get_locked_pte+0x2e6/0x4d0 [ 1323.921294][ T5119] vm_insert_page+0x3e1/0xb40 [ 1323.926001][ T5119] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 1323.931572][ T5119] ? mark_held_locks+0x9f/0xe0 [ 1323.936361][ T5119] drm_gem_shmem_fault+0x1df/0x2d0 [ 1323.941510][ T5119] __do_fault+0x10d/0x4e0 [ 1323.945868][ T5119] __handle_mm_fault+0x28ff/0x5320 [ 1323.951019][ T5119] ? vm_iomap_memory+0x190/0x190 [ 1323.956009][ T5119] handle_mm_fault+0x1c8/0x790 17:08:12 executing program 0 (fault-call:7 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) [ 1323.960803][ T5119] do_user_addr_fault+0x48b/0x11c0 [ 1323.965953][ T5119] exc_page_fault+0x9e/0x180 [ 1323.970578][ T5119] asm_exc_page_fault+0x1e/0x30 [ 1323.975449][ T5119] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 1323.982067][ T5119] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 1324.001709][ T5119] RSP: 0018:ffffc90005bcf990 EFLAGS: 00010206 [ 1324.004573][ T5113] Modules linked in: [ 1324.007790][ T5119] RAX: 0000000000000001 RBX: 0000000000400000 RCX: 00000000002001c0 [ 1324.013249][ T5113] [ 1324.019733][ T5119] RDX: 0000000000400000 RSI: 0000000020200000 RDI: ffff88808b9ffe40 [ 1324.019757][ T5119] RBP: ffff88808b800000 R08: 0000000000000001 R09: ffff88808bbfffff [ 1324.019776][ T5119] R10: ffffed101177ffff R11: 0000000000000000 R12: 00000000200001c0 [ 1324.019794][ T5119] R13: 00000000204001c0 R14: 0000000000000000 R15: ffffc90005bcfbe0 [ 1324.019835][ T5119] copyin.part.0+0xe4/0x110 [ 1324.031987][ T5113] CPU: 1 PID: 5113 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 1324.038087][ T5119] _copy_from_iter+0x2a3/0x1320 [ 1324.038137][ T5119] ? hash_and_copy_to_iter+0x200/0x200 [ 1324.038173][ T5119] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1324.048439][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.054122][ T5119] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1324.054161][ T5119] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1324.054193][ T5119] ? __phys_addr+0xc4/0x140 [ 1324.054221][ T5119] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1324.054249][ T5119] ? __phys_addr_symbol+0x2c/0x70 [ 1324.059055][ T5113] RIP: 0010:drm_gem_shmem_vm_open+0x96/0xb0 [ 1324.067439][ T5119] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1324.067476][ T5119] ? __check_object_size+0x16e/0x3f0 [ 1324.067516][ T5119] qrtr_tun_write_iter+0xff/0x1a0 [ 1324.067553][ T5119] aio_write+0x350/0x7a0 [ 1324.072634][ T5113] Code: 89 c6 e8 4d ee 20 fd 85 db 75 1a e8 04 e7 20 fd 48 89 ef 5b 5d 41 5c e9 c8 66 f5 ff e8 f3 e6 20 fd 0f 0b eb ca e8 ea e6 20 fd <0f> 0b eb dd e8 51 30 68 fd eb 89 e8 4a 30 68 fd eb a8 0f 1f 84 00 [ 1324.077846][ T5119] ? aio_poll_queue_proc+0x100/0x100 [ 1324.077897][ T5119] ? __might_fault+0xd3/0x180 [ 1324.077930][ T5119] ? lock_downgrade+0x6e0/0x6e0 [ 1324.077980][ T5119] io_submit_one+0xe09/0x1b80 [ 1324.084448][ T5113] RSP: 0018:ffffc90005cefb98 EFLAGS: 00010212 [ 1324.094239][ T5119] ? find_held_lock+0x2d/0x110 [ 1324.094270][ T5119] ? __do_compat_sys_io_pgetevents_time64+0x400/0x400 [ 1324.094309][ T5119] ? __might_fault+0xd3/0x180 [ 1324.094340][ T5119] ? lock_downgrade+0x6e0/0x6e0 [ 1324.100805][ T5113] [ 1324.106807][ T5119] __x64_sys_io_submit+0x18c/0x330 [ 1324.106845][ T5119] ? __ia32_sys_io_destroy+0x1e0/0x1e0 [ 1324.106887][ T5119] ? syscall_enter_from_user_mode+0x21/0x70 [ 1324.106925][ T5119] do_syscall_64+0x35/0xb0 [ 1324.111629][ T5113] RAX: 0000000000005517 RBX: 00000000fffffffc RCX: ffffc9000b222000 [ 1324.117618][ T5119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1324.117653][ T5119] RIP: 0033:0x7fb9c7c77739 [ 1324.117677][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.117704][ T5119] RSP: 002b:00007fb9c51ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1324.117730][ T5119] RAX: ffffffffffffffda RBX: 00007fb9c7d7bf80 RCX: 00007fb9c7c77739 [ 1324.122972][ T5113] RDX: 0000000000040000 RSI: ffffffff845524f6 RDI: 0000000000000003 [ 1324.128613][ T5119] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007fb9c7d5f000 17:08:12 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000001400)=ANY=[@ANYBLOB="030000000000000000a7d9941f9f20a819539f08f1e302a2505228e4fdd8f4aa84e4a4ebb249bb926468bf6a94a0b0741604895c9a7fdc4ebde2db52584bf98e4385d6fad2b65f4c1524379b1f92470b9463565b9af1654b11d8e432a29fb2a666cd35b36961ec13d3aaf9c968fdac7afc6a4151c64d78520f940626e90f0554a55fb2f7a9c80f4733e7efa3f1c74a318cdf2d3844db3a7d1460aff497de570e725690941a6aaf05ae72facc05ed87b711a0e6807a426cc526ed65d3b05d96febae891a3643b5ff1c7324fc9e53a0dd023861e7587ceea0544f500000000"], 0xc9, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') readv(r1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/4096}, 0x1008, 0x1, 0x2c00) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x6180, 0x0) fdatasync(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1, 0xb242, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 1324.128632][ T5119] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.128650][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.128666][ T5119] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 [ 1324.335194][ T5129] FAULT_INJECTION: forcing a failure. [ 1324.335194][ T5129] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.394537][ T5129] CPU: 0 PID: 5129 Comm: syz-executor.0 Not tainted 5.15.0-rc1-syzkaller #0 [ 1324.403266][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.413341][ T5129] Call Trace: [ 1324.416636][ T5129] dump_stack_lvl+0xcd/0x134 [ 1324.421248][ T5129] should_fail.cold+0x5/0xa [ 1324.425778][ T5129] should_failslab+0x5/0x10 [ 1324.430305][ T5129] kmem_cache_alloc_node+0x65/0x3d0 [ 1324.435525][ T5129] ? __alloc_skb+0x20b/0x340 [ 1324.440141][ T5129] __alloc_skb+0x20b/0x340 [ 1324.444582][ T5129] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 1324.449907][ T5129] rtmsg_ifinfo+0x83/0x120 [ 1324.454348][ T5129] dev_close_many+0x2e4/0x620 [ 1324.457039][ T5113] RBP: ffff88801b773528 R08: 0000000000000000 R09: 0000000000000000 [ 1324.459052][ T5129] ? register_netdevice_notifier_dev_net+0x240/0x240 [ 1324.467091][ T5113] R10: ffffffff845524d3 R11: 0000000000000001 R12: ffff888146150000 [ 1324.473701][ T5129] ? lock_downgrade+0x6e0/0x6e0 [ 1324.473744][ T5129] unregister_netdevice_many+0x3ff/0x1790 [ 1324.481698][ T5113] R13: ffff888078f52840 R14: 0000000020190000 R15: ffff88801b7735b8 [ 1324.486523][ T5129] ? __queue_work+0x62c/0xee0 [ 1324.486561][ T5129] ? default_device_exit+0x300/0x300 [ 1324.492256][ T5113] FS: 00007fb82fcab700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1324.500214][ T5129] ? queue_delayed_work_on+0xe6/0x120 [ 1324.500250][ T5129] unregister_netdevice_queue+0x2dd/0x3c0 [ 1324.504939][ T5113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.510171][ T5129] ? unregister_netdevice_many+0x1790/0x1790 [ 1324.519112][ T5113] CR2: 0000001b31423000 CR3: 000000007354c000 CR4: 00000000001506e0 [ 1324.524433][ T5129] ? linkwatch_schedule_work+0x181/0x1c0 [ 1324.524470][ T5129] ? linkwatch_fire_event+0x65/0x250 [ 1324.530175][ T5113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1324.536759][ T5129] __tun_detach+0x10ad/0x13d0 [ 1324.536803][ T5129] tun_chr_close+0xc4/0x180 [ 1324.536828][ T5129] __fput+0x288/0x9f0 [ 1324.536853][ T5129] ? __tun_detach+0x13d0/0x13d0 [ 1324.536885][ T5129] task_work_run+0xdd/0x1a0 [ 1324.536918][ T5129] exit_to_user_mode_prepare+0x27e/0x290 [ 1324.536950][ T5129] syscall_exit_to_user_mode+0x19/0x60 [ 1324.536981][ T5129] do_syscall_64+0x42/0xb0 [ 1324.537012][ T5129] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1324.537044][ T5129] RIP: 0033:0x7f2361982739 [ 1324.537068][ T5129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.537100][ T5129] RSP: 002b:00007f235eef9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1324.537127][ T5129] RAX: 0000000000000000 RBX: 00007f2361a86f80 RCX: 00007f2361982739 [ 1324.537145][ T5129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1324.537162][ T5129] RBP: 00007f235eef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.537180][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.537197][ T5129] R13: 00007f2361fbab1f R14: 00007f235eef9300 R15: 0000000000022000 [ 1324.703130][ T5113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1324.711179][ T5113] Call Trace: [ 1324.733327][ T5113] ? drm_gem_shmem_fault+0x2d0/0x2d0 [ 1324.738687][ T5113] __split_vma+0x23c/0x550 17:08:13 executing program 3 (fault-call:6 fault-nth:8): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x66e1, r3, &(0x7f0000000040)="c51c01ed79d8572c6a928352ecfeaf3108cc922f0f24194421958bbb9ef0df281b0daf65ccc3b2ea08eac470f86bcd22cd25c0a90352139d1c69337c56f4b84d9d0737abaadbb0c63cfaf017836668193cbaadb9fd1f7bf3dd389bc5d8a9cd0d26825668a87691815e81c245444d77876c1de9aadca82732f5ae681a1bb05a17b7beb7e9462db847", 0x88, 0x4, 0x0, 0x2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x3c0c, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 1324.786542][ T5113] __do_munmap+0x32a/0x11c0 [ 1324.791796][ T5113] mmap_region+0x2fd/0x1650 [ 1324.798411][ T5113] do_mmap+0x869/0xfb0 [ 1324.802889][ T5113] vm_mmap_pgoff+0x1b7/0x290 [ 1324.808993][ T5113] ? randomize_stack_top+0x100/0x100 [ 1324.815413][ T5113] ? __fget_files+0x23d/0x3e0 [ 1324.820511][ T5113] ksys_mmap_pgoff+0x49f/0x620 17:08:13 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x8, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x187, 0x0, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) 17:08:13 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}}, 0x0) mmap(&(0x7f00002e6000/0x2000)=nil, 0x2000, 0x2000010, 0x10, 0xffffffffffffffff, 0xa2885000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006, 0x12, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="03", 0x400000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f00001d8000/0x1000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, &(0x7f0000000100)) [ 1324.837816][ T5113] ? mlock_future_check+0x120/0x120 [ 1324.874783][ T5113] ? syscall_enter_from_user_mode+0x21/0x70 [ 1324.901532][ T5113] do_syscall_64+0x35/0xb0 [ 1324.925080][ T5113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1324.951235][ T5113] RIP: 0033:0x7fb832755782 [ 1324.974153][ T5113] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1325.085380][ T5113] RSP: 002b:00007fb82fcab0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1325.097810][ T5113] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb832755782 [ 1325.106906][ T5113] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020190000 [ 1325.116623][ T5113] RBP: 0000000020190000 R08: 0000000000000008 R09: 0000000010000000 [ 1325.145869][ T5140] FAULT_INJECTION: forcing a failure. [ 1325.145869][ T5140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.153589][ T5113] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1325.190990][ T5113] R13: 0000000020190000 R14: 0000000020000000 R15: 00000000201d8000 [ 1325.216931][ T5113] Kernel panic - not syncing: panic_on_warn set ... [ 1325.223561][ T5113] CPU: 0 PID: 5113 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 1325.232273][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.242346][ T5113] Call Trace: [ 1325.245638][ T5113] dump_stack_lvl+0xcd/0x134 [ 1325.250246][ T5113] panic+0x2b0/0x6dd [ 1325.254201][ T5113] ? __warn_printk+0xf3/0xf3 [ 1325.258819][ T5113] ? __warn.cold+0x1a/0x44 [ 1325.263254][ T5113] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 1325.268566][ T5113] __warn.cold+0x35/0x44 [ 1325.272824][ T5113] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 1325.278126][ T5113] report_bug+0x1bd/0x210 [ 1325.282537][ T5113] handle_bug+0x3c/0x60 [ 1325.286713][ T5113] exc_invalid_op+0x14/0x40 [ 1325.291226][ T5113] asm_exc_invalid_op+0x12/0x20 [ 1325.296085][ T5113] RIP: 0010:drm_gem_shmem_vm_open+0x96/0xb0 [ 1325.301995][ T5113] Code: 89 c6 e8 4d ee 20 fd 85 db 75 1a e8 04 e7 20 fd 48 89 ef 5b 5d 41 5c e9 c8 66 f5 ff e8 f3 e6 20 fd 0f 0b eb ca e8 ea e6 20 fd <0f> 0b eb dd e8 51 30 68 fd eb 89 e8 4a 30 68 fd eb a8 0f 1f 84 00 [ 1325.321605][ T5113] RSP: 0018:ffffc90005cefb98 EFLAGS: 00010212 [ 1325.327675][ T5113] RAX: 0000000000005517 RBX: 00000000fffffffc RCX: ffffc9000b222000 [ 1325.335645][ T5113] RDX: 0000000000040000 RSI: ffffffff845524f6 RDI: 0000000000000003 [ 1325.343619][ T5113] RBP: ffff88801b773528 R08: 0000000000000000 R09: 0000000000000000 [ 1325.351610][ T5113] R10: ffffffff845524d3 R11: 0000000000000001 R12: ffff888146150000 [ 1325.359597][ T5113] R13: ffff888078f52840 R14: 0000000020190000 R15: ffff88801b7735b8 [ 1325.367580][ T5113] ? drm_gem_shmem_vm_open+0x73/0xb0 [ 1325.372885][ T5113] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 1325.378191][ T5113] ? drm_gem_shmem_vm_open+0x96/0xb0 [ 1325.383487][ T5113] ? drm_gem_shmem_fault+0x2d0/0x2d0 [ 1325.388776][ T5113] __split_vma+0x23c/0x550 [ 1325.393205][ T5113] __do_munmap+0x32a/0x11c0 [ 1325.397723][ T5113] mmap_region+0x2fd/0x1650 [ 1325.402247][ T5113] do_mmap+0x869/0xfb0 [ 1325.406330][ T5113] vm_mmap_pgoff+0x1b7/0x290 [ 1325.410932][ T5113] ? randomize_stack_top+0x100/0x100 [ 1325.416237][ T5113] ? __fget_files+0x23d/0x3e0 [ 1325.420929][ T5113] ksys_mmap_pgoff+0x49f/0x620 [ 1325.425702][ T5113] ? mlock_future_check+0x120/0x120 [ 1325.430914][ T5113] ? syscall_enter_from_user_mode+0x21/0x70 [ 1325.436820][ T5113] do_syscall_64+0x35/0xb0 [ 1325.441247][ T5113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.447167][ T5113] RIP: 0033:0x7fb832755782 [ 1325.451582][ T5113] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1325.471210][ T5113] RSP: 002b:00007fb82fcab0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1325.479633][ T5113] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fb832755782 [ 1325.487606][ T5113] RDX: 0000000000000003 RSI: 0000000000008000 RDI: 0000000020190000 [ 1325.495598][ T5113] RBP: 0000000020190000 R08: 0000000000000008 R09: 0000000010000000 [ 1325.503577][ T5113] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 1325.511548][ T5113] R13: 0000000020190000 R14: 0000000020000000 R15: 00000000201d8000 [ 1325.519539][ T5140] CPU: 1 PID: 5140 Comm: syz-executor.3 Not tainted 5.15.0-rc1-syzkaller #0 [ 1325.528231][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.538292][ T5140] Call Trace: [ 1325.541569][ T5140] dump_stack_lvl+0xcd/0x134 [ 1325.546167][ T5140] should_fail.cold+0x5/0xa [ 1325.550682][ T5140] _copy_to_user+0x2c/0x150 [ 1325.555188][ T5140] simple_read_from_buffer+0xcc/0x160 [ 1325.560574][ T5140] proc_fail_nth_read+0x187/0x220 [ 1325.565624][ T5140] ? proc_fault_inject_read+0x220/0x220 [ 1325.571174][ T5140] ? security_file_permission+0xab/0xd0 [ 1325.576727][ T5140] ? proc_fault_inject_read+0x220/0x220 [ 1325.582281][ T5140] vfs_read+0x1b5/0x600 [ 1325.586445][ T5140] ksys_read+0x12d/0x250 [ 1325.590690][ T5140] ? vfs_write+0xae0/0xae0 [ 1325.595110][ T5140] ? syscall_enter_from_user_mode+0x21/0x70 [ 1325.601016][ T5140] do_syscall_64+0x35/0xb0 [ 1325.605438][ T5140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.611340][ T5140] RIP: 0033:0x7fb9c7c2a4bc [ 1325.615767][ T5140] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1325.635411][ T5140] RSP: 002b:00007fb9c51ee170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1325.643841][ T5140] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb9c7c2a4bc [ 1325.651835][ T5140] RDX: 000000000000000f RSI: 00007fb9c51ee1e0 RDI: 0000000000000005 [ 1325.659809][ T5140] RBP: 00007fb9c51ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.667787][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.675757][ T5140] R13: 00007fb9c82afb1f R14: 00007fb9c51ee300 R15: 0000000000022000 [ 1325.684036][ T5113] Kernel Offset: disabled [ 1325.688606][ T5113] Rebooting in 86400 seconds..