ORIG_RAX: 0000000000000003 [ 412.641731] RAX: 0000000000000000 RBX: 00007fd17c3326d4 RCX: 000000000045c6c9 [ 412.649134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 412.656424] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 412.663713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 412.671005] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000002 04:36:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0xf00, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 412.693569] input: syz1 as /devices/virtual/input/input212 [ 412.772456] input: syz1 as /devices/virtual/input/input213 04:36:03 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:03 executing program 5 (fault-call:5 fault-nth:3): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x340, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f00}}, 0x45c) 04:36:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80001, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410040, 0x2) splice(r1, &(0x7f0000000040)=0x401, r2, &(0x7f0000000200)=0x3, 0x0, 0x3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000000c0)=0xffffffff, 0x4) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x4, 0x1, 0x4}, 0x4}}, 0x18) close(r0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10, r4, 0xdaf8000) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000140)=0x7) [ 413.013070] FAULT_INJECTION: forcing a failure. [ 413.013070] name failslab, interval 1, probability 0, space 0, times 0 [ 413.024699] input: syz1 as /devices/virtual/input/input214 [ 413.042813] CPU: 0 PID: 19369 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 413.050746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.060233] Call Trace: [ 413.062857] dump_stack+0x197/0x210 [ 413.066524] should_fail.cold+0xa/0x1b [ 413.070443] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 413.075571] ? lock_downgrade+0x880/0x880 [ 413.079859] __should_failslab+0x121/0x190 [ 413.084128] should_failslab+0x9/0x14 [ 413.087950] kmem_cache_alloc_node+0x26c/0x710 [ 413.092556] ? lock_downgrade+0x880/0x880 [ 413.096776] __alloc_skb+0xd5/0x5f0 [ 413.100436] ? skb_trim+0x190/0x190 [ 413.104087] ? kfree+0x170/0x220 [ 413.107565] ? __addrconf_sysctl_unregister.isra.0+0x92/0xe0 [ 413.113383] ? kfree+0x170/0x220 [ 413.116915] ? lockdep_hardirqs_on+0x415/0x5d0 [ 413.121528] inet6_netconf_notify_devconf+0xab/0x1e0 [ 413.126664] __addrconf_sysctl_unregister.isra.0+0xa7/0xe0 [ 413.132321] addrconf_sysctl_unregister+0x91/0xf0 [ 413.137209] addrconf_ifdown+0xc4d/0x10d0 [ 413.137348] addrconf_notify+0x5cd/0x2160 [ 413.145850] ? __local_bh_enable_ip+0x15a/0x270 [ 413.150541] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.156248] ? tls_dev_event+0x11c/0xcb0 [ 413.160400] ? clusterip_netdev_event+0x474/0x670 [ 413.165447] ? trace_hardirqs_on+0x67/0x220 [ 413.169796] ? clusterip_netdev_event+0x474/0x670 [ 413.174662] ? inet6_ifinfo_notify+0x150/0x150 [ 413.179266] ? _raw_spin_unlock_bh+0x31/0x40 [ 413.183791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.189689] ? ip6mr_device_event+0x1ad/0x220 [ 413.194220] notifier_call_chain+0xc2/0x230 [ 413.198567] ? notifier_call_chain+0xc2/0x230 [ 413.203217] raw_notifier_call_chain+0x2e/0x40 [ 413.207832] call_netdevice_notifiers_info+0x3f/0x90 [ 413.212970] rollback_registered_many+0x894/0xda0 [ 413.217840] ? tun_show_group+0x180/0x180 [ 413.222013] ? generic_xdp_install+0x3d0/0x3d0 [ 413.226625] ? mark_held_locks+0xb1/0x100 [ 413.230810] ? linkwatch_schedule_work+0x13c/0x170 [ 413.235763] ? queue_delayed_work_on+0xe6/0x200 [ 413.240458] ? lockdep_hardirqs_on+0x415/0x5d0 [ 413.245066] rollback_registered+0x109/0x1d0 [ 413.249498] ? rollback_registered_many+0xda0/0xda0 [ 413.254547] unregister_netdevice_queue+0x1ee/0x2c0 [ 413.259618] __tun_detach+0xd9b/0x1050 [ 413.263540] ? tun_chr_ioctl+0x40/0x40 [ 413.267448] tun_chr_close+0xe0/0x180 [ 413.271273] __fput+0x2dd/0x8b0 [ 413.274583] ____fput+0x16/0x20 [ 413.277881] task_work_run+0x145/0x1c0 [ 413.281820] exit_to_usermode_loop+0x273/0x2c0 [ 413.286424] do_syscall_64+0x53d/0x620 [ 413.290337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.295536] RIP: 0033:0x45c6c9 [ 413.298754] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.317835] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 413.325691] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 413.333062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 413.340343] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 413.347633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 413.354917] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000003 [ 413.367904] audit: type=1400 audit(1581914164.047:143): avc: denied { map } for pid=19378 comm="syz-executor.4" path="/dev/tty28" dev="devtmpfs" ino=17144 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=1 [ 413.410632] input: syz1 as /devices/virtual/input/input215 04:36:04 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:04 executing program 5 (fault-call:5 fault-nth:4): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) 04:36:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x340, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 413.587626] FAULT_INJECTION: forcing a failure. [ 413.587626] name failslab, interval 1, probability 0, space 0, times 0 [ 413.634575] CPU: 0 PID: 19393 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 413.635521] input: syz1 as /devices/virtual/input/input216 [ 413.642631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.642639] Call Trace: [ 413.642667] dump_stack+0x197/0x210 [ 413.642694] should_fail.cold+0xa/0x1b [ 413.642716] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 413.642736] ? lock_downgrade+0x880/0x880 [ 413.642760] __should_failslab+0x121/0x190 [ 413.681584] should_failslab+0x9/0x14 [ 413.681601] kmem_cache_alloc_node_trace+0x274/0x720 04:36:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 413.681618] ? __alloc_skb+0xd5/0x5f0 04:36:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x2}, 0x45c) [ 413.681643] __kmalloc_node_track_caller+0x3d/0x80 [ 413.681660] __kmalloc_reserve.isra.0+0x40/0xf0 [ 413.681679] __alloc_skb+0x10b/0x5f0 [ 413.681695] ? skb_trim+0x190/0x190 [ 413.681708] ? kfree+0x170/0x220 [ 413.681725] ? __addrconf_sysctl_unregister.isra.0+0x92/0xe0 [ 413.681737] ? kfree+0x170/0x220 [ 413.681757] ? lockdep_hardirqs_on+0x415/0x5d0 [ 413.681781] inet6_netconf_notify_devconf+0xab/0x1e0 [ 413.681803] __addrconf_sysctl_unregister.isra.0+0xa7/0xe0 [ 413.681823] addrconf_sysctl_unregister+0x91/0xf0 [ 413.681842] addrconf_ifdown+0xc4d/0x10d0 04:36:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) recvfrom$l2tp(r3, &(0x7f0000000000)=""/162, 0xa2, 0x10040, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 413.681871] addrconf_notify+0x5cd/0x2160 [ 413.681887] ? __local_bh_enable_ip+0x15a/0x270 [ 413.681903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 04:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x3}, 0x45c) [ 413.681918] ? tls_dev_event+0x11c/0xcb0 [ 413.681936] ? clusterip_netdev_event+0x474/0x670 [ 413.681952] ? trace_hardirqs_on+0x67/0x220 [ 413.681970] ? clusterip_netdev_event+0x474/0x670 [ 413.681990] ? inet6_ifinfo_notify+0x150/0x150 [ 413.682006] ? _raw_spin_unlock_bh+0x31/0x40 [ 413.682021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.682038] ? ip6mr_device_event+0x1ad/0x220 [ 413.682062] notifier_call_chain+0xc2/0x230 [ 413.682078] ? notifier_call_chain+0xc2/0x230 04:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x4}, 0x45c) [ 413.682103] raw_notifier_call_chain+0x2e/0x40 [ 413.682121] call_netdevice_notifiers_info+0x3f/0x90 [ 413.682148] rollback_registered_many+0x894/0xda0 [ 413.682167] ? tun_show_group+0x180/0x180 [ 413.682184] ? generic_xdp_install+0x3d0/0x3d0 [ 413.682206] ? mark_held_locks+0xb1/0x100 [ 413.682225] ? linkwatch_schedule_work+0x13c/0x170 [ 413.682241] ? queue_delayed_work_on+0xe6/0x200 [ 413.682259] ? lockdep_hardirqs_on+0x415/0x5d0 [ 413.682283] rollback_registered+0x109/0x1d0 [ 413.682302] ? rollback_registered_many+0xda0/0xda0 [ 413.682331] unregister_netdevice_queue+0x1ee/0x2c0 [ 413.682351] __tun_detach+0xd9b/0x1050 [ 413.682379] ? tun_chr_ioctl+0x40/0x40 [ 413.682394] tun_chr_close+0xe0/0x180 [ 413.682412] __fput+0x2dd/0x8b0 [ 413.682435] ____fput+0x16/0x20 [ 413.682449] task_work_run+0x145/0x1c0 [ 413.682476] exit_to_usermode_loop+0x273/0x2c0 [ 413.682497] do_syscall_64+0x53d/0x620 [ 413.682520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.682533] RIP: 0033:0x45c6c9 [ 413.682549] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.682559] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 413.682574] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 413.682584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 413.682593] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 413.682603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 413.682613] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000004 [ 413.870494] input: syz1 as /devices/virtual/input/input218 [ 413.943899] input: syz1 as /devices/virtual/input/input219 [ 414.143794] input: syz1 as /devices/virtual/input/input220 [ 414.212091] input: syz1 as /devices/virtual/input/input221 [ 414.616907] input: syz1 as /devices/virtual/input/input222 04:36:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:05 executing program 5 (fault-call:5 fault-nth:5): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x340, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:05 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x501000, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xc242, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8187}, 0x0, 0xd, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) 04:36:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x5}, 0x45c) [ 414.945122] FAULT_INJECTION: forcing a failure. [ 414.945122] name failslab, interval 1, probability 0, space 0, times 0 [ 415.000310] CPU: 0 PID: 19441 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 415.008249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.017617] Call Trace: [ 415.020235] dump_stack+0x197/0x210 [ 415.023897] should_fail.cold+0xa/0x1b [ 415.027813] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 415.032938] ? lock_downgrade+0x880/0x880 [ 415.037164] __should_failslab+0x121/0x190 [ 415.041426] should_failslab+0x9/0x14 [ 415.045351] kmem_cache_alloc_node+0x26c/0x710 [ 415.049951] ? lock_downgrade+0x880/0x880 [ 415.054129] __alloc_skb+0xd5/0x5f0 [ 415.057779] ? skb_trim+0x190/0x190 [ 415.061486] ? mpls_dev_sysctl_unregister+0x8d/0xc0 [ 415.066520] ? kfree+0x170/0x220 [ 415.069973] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.074582] mpls_netconf_notify_devconf+0x57/0x120 [ 415.079618] mpls_dev_sysctl_unregister+0x9f/0xc0 [ 415.084481] mpls_dev_notify+0x639/0x882 [ 415.088631] ? dp_device_event+0x54/0x370 [ 415.092812] notifier_call_chain+0xc2/0x230 [ 415.097268] raw_notifier_call_chain+0x2e/0x40 [ 415.101871] call_netdevice_notifiers_info+0x3f/0x90 [ 415.106999] rollback_registered_many+0x894/0xda0 [ 415.112011] ? tun_show_group+0x180/0x180 [ 415.116178] ? generic_xdp_install+0x3d0/0x3d0 [ 415.120790] ? mark_held_locks+0xb1/0x100 [ 415.124960] ? linkwatch_schedule_work+0x13c/0x170 [ 415.129911] ? queue_delayed_work_on+0xe6/0x200 [ 415.134713] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.139426] rollback_registered+0x109/0x1d0 [ 415.143868] ? rollback_registered_many+0xda0/0xda0 [ 415.148920] unregister_netdevice_queue+0x1ee/0x2c0 [ 415.153964] __tun_detach+0xd9b/0x1050 [ 415.157884] ? tun_chr_ioctl+0x40/0x40 [ 415.161784] tun_chr_close+0xe0/0x180 [ 415.165617] __fput+0x2dd/0x8b0 [ 415.168920] ____fput+0x16/0x20 [ 415.172213] task_work_run+0x145/0x1c0 [ 415.176132] exit_to_usermode_loop+0x273/0x2c0 [ 415.180742] do_syscall_64+0x53d/0x620 [ 415.184660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.189862] RIP: 0033:0x45c6c9 [ 415.193080] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.212477] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 415.220304] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 415.227695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 415.234984] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 415.242268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 415.249550] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000005 [ 415.273880] input: syz1 as /devices/virtual/input/input224 04:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x11}, 0x45c) 04:36:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe0, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:06 executing program 5 (fault-call:5 fault-nth:6): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 415.468703] input: syz1 as /devices/virtual/input/input226 04:36:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x12}, 0x45c) 04:36:06 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80040, 0x0) connect$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 415.631128] FAULT_INJECTION: forcing a failure. [ 415.631128] name failslab, interval 1, probability 0, space 0, times 0 [ 415.691857] CPU: 1 PID: 19464 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 415.699894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.709275] Call Trace: [ 415.711894] dump_stack+0x197/0x210 [ 415.715568] should_fail.cold+0xa/0x1b [ 415.719482] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 415.724621] ? lock_downgrade+0x880/0x880 [ 415.724649] __should_failslab+0x121/0x190 [ 415.724668] should_failslab+0x9/0x14 [ 415.724684] kmem_cache_alloc_node_trace+0x274/0x720 [ 415.724701] ? __alloc_skb+0xd5/0x5f0 [ 415.724726] __kmalloc_node_track_caller+0x3d/0x80 [ 415.724744] __kmalloc_reserve.isra.0+0x40/0xf0 04:36:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x14}, 0x45c) [ 415.724762] __alloc_skb+0x10b/0x5f0 [ 415.724779] ? skb_trim+0x190/0x190 [ 415.724797] ? mpls_dev_sysctl_unregister+0x8d/0xc0 [ 415.724809] ? kfree+0x170/0x220 [ 415.724826] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.724851] mpls_netconf_notify_devconf+0x57/0x120 [ 415.724873] mpls_dev_sysctl_unregister+0x9f/0xc0 [ 415.724893] mpls_dev_notify+0x639/0x882 [ 415.724911] ? dp_device_event+0x54/0x370 [ 415.725043] notifier_call_chain+0xc2/0x230 [ 415.725072] raw_notifier_call_chain+0x2e/0x40 [ 415.725091] call_netdevice_notifiers_info+0x3f/0x90 [ 415.725111] rollback_registered_many+0x894/0xda0 [ 415.725130] ? tun_show_group+0x180/0x180 [ 415.725148] ? generic_xdp_install+0x3d0/0x3d0 [ 415.725171] ? mark_held_locks+0xb1/0x100 [ 415.725190] ? linkwatch_schedule_work+0x13c/0x170 [ 415.725206] ? queue_delayed_work_on+0xe6/0x200 [ 415.725223] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.725257] rollback_registered+0x109/0x1d0 [ 415.725275] ? rollback_registered_many+0xda0/0xda0 [ 415.725304] unregister_netdevice_queue+0x1ee/0x2c0 [ 415.725324] __tun_detach+0xd9b/0x1050 [ 415.725353] ? tun_chr_ioctl+0x40/0x40 [ 415.725369] tun_chr_close+0xe0/0x180 [ 415.725388] __fput+0x2dd/0x8b0 [ 415.725413] ____fput+0x16/0x20 [ 415.725427] task_work_run+0x145/0x1c0 [ 415.725451] exit_to_usermode_loop+0x273/0x2c0 [ 415.725470] do_syscall_64+0x53d/0x620 [ 415.725587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.725601] RIP: 0033:0x45c6c9 [ 415.725642] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.725652] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 415.725667] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 415.725677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 415.725687] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 415.725696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 415.725706] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000006 [ 415.739366] input: syz1 as /devices/virtual/input/input228 [ 415.784763] input: syz1 as /devices/virtual/input/input229 [ 415.957221] input: syz1 as /devices/virtual/input/input230 04:36:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe0, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:07 executing program 5 (fault-call:5 fault-nth:7): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x15}, 0x45c) [ 416.359548] FAULT_INJECTION: forcing a failure. [ 416.359548] name failslab, interval 1, probability 0, space 0, times 0 [ 416.441348] input: syz1 as /devices/virtual/input/input232 [ 416.448418] CPU: 0 PID: 19493 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 416.456341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.465711] Call Trace: [ 416.468323] dump_stack+0x197/0x210 [ 416.471986] should_fail.cold+0xa/0x1b [ 416.475901] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 416.481027] ? lock_downgrade+0x880/0x880 [ 416.485207] __should_failslab+0x121/0x190 [ 416.489563] should_failslab+0x9/0x14 [ 416.493370] kmem_cache_alloc_node+0x26c/0x710 [ 416.497977] __alloc_skb+0xd5/0x5f0 [ 416.501621] ? skb_trim+0x190/0x190 [ 416.505265] ? if_nlmsg_size+0x4ad/0x9f0 [ 416.509349] rtmsg_ifinfo_build_skb+0x74/0x1a0 [ 416.514044] rollback_registered_many+0x92b/0xda0 [ 416.518917] ? generic_xdp_install+0x3d0/0x3d0 [ 416.523614] ? mark_held_locks+0xb1/0x100 [ 416.527784] ? linkwatch_schedule_work+0x13c/0x170 [ 416.532728] ? queue_delayed_work_on+0xe6/0x200 [ 416.537446] ? lockdep_hardirqs_on+0x415/0x5d0 [ 416.542054] rollback_registered+0x109/0x1d0 [ 416.546483] ? rollback_registered_many+0xda0/0xda0 [ 416.551527] unregister_netdevice_queue+0x1ee/0x2c0 [ 416.556561] __tun_detach+0xd9b/0x1050 [ 416.560481] ? tun_chr_ioctl+0x40/0x40 [ 416.564386] tun_chr_close+0xe0/0x180 [ 416.568204] __fput+0x2dd/0x8b0 [ 416.571639] ____fput+0x16/0x20 [ 416.574935] task_work_run+0x145/0x1c0 [ 416.578972] exit_to_usermode_loop+0x273/0x2c0 [ 416.583577] do_syscall_64+0x53d/0x620 [ 416.587598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.592800] RIP: 0033:0x45c6c9 [ 416.596004] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.615016] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 416.622743] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 416.630029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 416.637315] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 416.644631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 416.651957] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000007 04:36:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x16}, 0x45c) 04:36:07 executing program 5 (fault-call:5 fault-nth:8): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe0, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 416.875207] input: syz1 as /devices/virtual/input/input234 [ 416.923569] FAULT_INJECTION: forcing a failure. [ 416.923569] name failslab, interval 1, probability 0, space 0, times 0 [ 417.016430] CPU: 1 PID: 19516 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 417.024413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.033784] Call Trace: [ 417.036402] dump_stack+0x197/0x210 [ 417.040062] should_fail.cold+0xa/0x1b [ 417.044083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 417.049227] ? lock_downgrade+0x880/0x880 [ 417.053413] __should_failslab+0x121/0x190 [ 417.057667] should_failslab+0x9/0x14 [ 417.061490] kmem_cache_alloc_node_trace+0x274/0x720 [ 417.066954] ? __alloc_skb+0xd5/0x5f0 [ 417.070791] __kmalloc_node_track_caller+0x3d/0x80 [ 417.075747] __kmalloc_reserve.isra.0+0x40/0xf0 [ 417.080438] __alloc_skb+0x10b/0x5f0 [ 417.084171] ? skb_trim+0x190/0x190 [ 417.087821] ? if_nlmsg_size+0x4ad/0x9f0 [ 417.091923] rtmsg_ifinfo_build_skb+0x74/0x1a0 [ 417.096650] rollback_registered_many+0x92b/0xda0 [ 417.101650] ? generic_xdp_install+0x3d0/0x3d0 [ 417.106265] ? mark_held_locks+0xb1/0x100 [ 417.110436] ? linkwatch_schedule_work+0x13c/0x170 [ 417.115572] ? queue_delayed_work_on+0xe6/0x200 [ 417.120265] ? lockdep_hardirqs_on+0x415/0x5d0 [ 417.124972] rollback_registered+0x109/0x1d0 [ 417.129403] ? rollback_registered_many+0xda0/0xda0 [ 417.135035] unregister_netdevice_queue+0x1ee/0x2c0 [ 417.140271] __tun_detach+0xd9b/0x1050 [ 417.144190] ? tun_chr_ioctl+0x40/0x40 [ 417.148093] tun_chr_close+0xe0/0x180 [ 417.151926] __fput+0x2dd/0x8b0 [ 417.155236] ____fput+0x16/0x20 [ 417.158540] task_work_run+0x145/0x1c0 [ 417.162463] exit_to_usermode_loop+0x273/0x2c0 [ 417.167065] do_syscall_64+0x53d/0x620 [ 417.171125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.176330] RIP: 0033:0x45c6c9 [ 417.179793] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.199113] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 417.206854] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 04:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x300}, 0x45c) [ 417.214156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 417.221447] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 417.228872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 417.236265] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000008 04:36:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x208201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x10001, 0x0, 0x10001, 0x200}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x0, r2}) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={0x800, 0x7, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 417.320015] input: syz1 as /devices/virtual/input/input236 04:36:08 executing program 5 (fault-call:5 fault-nth:9): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x500}, 0x45c) 04:36:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2d8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7ff, 0x2) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="862146d9e8b0853af9034213949f368945e888ac4c1173523c9766384444a47d6ae3d10b0cb9b1359d2956d7dee3275a13d65d968f892ec2e26cae7ac8f769ac73e1ed46d17f45c8700061b9491264a7cd919f7713b4a69f74402dacdcf67e78acbd9b59913d54d7479696f9ba0e62b75c2e7b8e26d54fc4544f7439e4c67a0f389c90b771c2dea67bcb34db124c30700e04b6f4151d8291cb29b137adc5c5e8be6495e34b687f06f2bd978575271a2bd2f639ac67b86767e224f5e25f6bea8f6a9ca5b069b7f9b73b9b21b0e6f67e34e363ad5bbd09d902dd893b44727df014c72ad2e6eddb38c9d4936edc17df4831b14b", 0xf2}, {&(0x7f0000000200)="484c8b91c6a2e8f24eb0883d35ed2243033013009c743d642a", 0x19}, {&(0x7f0000000240)="29fb88b0e3011dbb9c06ecf025ddfeda26b6110242352d719f4d7ef602198561c51aeeb14aba1d", 0x27}, {&(0x7f0000000280)="28f50f6945c11d8bec7490d3c39c23bf361fcc02574186b298e0a019f1cb3f98f5ddf339d9090bb66562d03b6cd5bc76d294160e05549f6e80e866dc8663b7322a6dac04324932edd0e854f231c7410fb7a6b9363b87fdb0022dd57e3d740837eff6e3c493b85a79b6b76ced1294d8bb2fc469410f6db1e8a8f7ceedf2216f2d0347d9cbad0ae6c1ad2d948835fb5343ac68cea686405e4c6bebc5ac9f49ded70fdead01d6c90389c6678f96f7477612fd74e42035f0fe67c7a8691307908c21e1852ea69ba857fa1a28667d8f4bdb73bb955690b95f66992d9d6f13db977b1df52bac3644704c610a2942d1cb", 0xed}, {&(0x7f0000000380)="9f035f47b73e0d5aa7614595426de5c001fdc9003cb78ee0244add5c666b4c6cfedc8cfe80ccce393c09d1245f017c3ec55bacbf887887609a4865db12f50d522c94147d7fc191b80376d52278033bf5bb17389379e925aa7b399a9c79afb98f100d95061808a6c97d5a1717d49d75bcd8af1066aa1d74438281739dee3dd5c181025b8b922458d28c6b5d0b61", 0x8d}], 0x5) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 417.599468] input: syz1 as /devices/virtual/input/input238 [ 417.614164] FAULT_INJECTION: forcing a failure. [ 417.614164] name failslab, interval 1, probability 0, space 0, times 0 [ 417.657755] CPU: 1 PID: 19546 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 417.665845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.675216] Call Trace: [ 417.677840] dump_stack+0x197/0x210 [ 417.681504] should_fail.cold+0xa/0x1b [ 417.685421] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 417.690571] ? lock_downgrade+0x880/0x880 [ 417.694891] __should_failslab+0x121/0x190 [ 417.699179] should_failslab+0x9/0x14 [ 417.703002] kmem_cache_alloc_trace+0x2cc/0x760 04:36:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x58, 0x7bb4, r3, 0x0, &(0x7f0000000100)={0x9e0906, 0x7fffffff, [], @p_u16=&(0x7f00000000c0)=0x3}}) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x159141, 0x0) r7 = inotify_init() r8 = inotify_add_watch(r7, &(0x7f0000000080)='.\x00', 0xfe) r9 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESHEX=r9, @ANYPTR, @ANYRES32=r8], 0x4) inotify_rm_watch(r6, r8) [ 417.707695] ? __wake_up_common_lock+0xfe/0x190 [ 417.712393] kobject_uevent_env+0x22c/0x1170 [ 417.716973] ? kmem_cache_free+0x222/0x260 [ 417.721244] kobject_uevent+0x20/0x30 [ 417.726024] kobject_put+0x1ff/0x290 [ 417.729976] net_rx_queue_update_kobjects+0x344/0x440 [ 417.735196] netdev_unregister_kobject+0x155/0x1f0 [ 417.740372] rollback_registered_many+0x6bb/0xda0 [ 417.745268] ? tun_detach_all+0x850/0x850 [ 417.749446] ? generic_xdp_install+0x3d0/0x3d0 [ 417.754064] ? mark_held_locks+0xb1/0x100 [ 417.758266] ? linkwatch_schedule_work+0x13c/0x170 [ 417.763215] ? queue_delayed_work_on+0xe6/0x200 [ 417.768023] ? lockdep_hardirqs_on+0x415/0x5d0 [ 417.772630] rollback_registered+0x109/0x1d0 [ 417.777070] ? rollback_registered_many+0xda0/0xda0 [ 417.782183] unregister_netdevice_queue+0x1ee/0x2c0 [ 417.782207] __tun_detach+0xd9b/0x1050 [ 417.782238] ? tun_chr_ioctl+0x40/0x40 [ 417.782254] tun_chr_close+0xe0/0x180 [ 417.782316] __fput+0x2dd/0x8b0 [ 417.782339] ____fput+0x16/0x20 04:36:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="8c0f5fb8544f5bffa320c5da6183819befaceacffb8ebd28520bb425b2f836d5de71b6cba773ec4f13389d05b8b1b5e7ba2d24ad7b991beda7351862baaab74bf58034434e9080d0cd2deba5c2fb3cfcd6512774a094f1fa71a6c4f29870521be7af756a0e44d3daad76b1c0b3ae74df891e1cea88bca6a73b8cfbb42b9373de2b85bddfc4c709d660ed607ab7b7b19b9e98c822e8b8823f6087f0ddca99572bc230b55548fa02e21d314ba5347a472bc7bea645a5af1c5662b80304cca6791edcd2b927fb7b3d0b826249be") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000140)={0x8, {0x1ff, 0x0, 0x2800000, 0x1f}, {0x6, 0x20, 0x4}, {0x5, 0x7}}) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 417.805922] task_work_run+0x145/0x1c0 [ 417.809868] exit_to_usermode_loop+0x273/0x2c0 [ 417.814534] do_syscall_64+0x53d/0x620 [ 417.818461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.823815] RIP: 0033:0x45c6c9 [ 417.827037] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.846269] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 04:36:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1100}, 0x45c) [ 417.854010] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 417.854020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 417.854029] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 417.854037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 417.854051] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000009 [ 417.927821] input: syz1 as /devices/virtual/input/input240 04:36:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:09 executing program 5 (fault-call:5 fault-nth:10): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 418.021454] input: syz1 as /devices/virtual/input/input241 04:36:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2d8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1200}, 0x45c) 04:36:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2a0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x6, 0x2, 0x1, 0x8}, {0x23ec, 0x25, 0xa4, 0x1}, {0x6, 0x1, 0x7f, 0xfffffffa}, {0xefd, 0x80, 0x6, 0x2}, {0x80, 0x75, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6f7, 0x81, 0x7f, 0xd196}, {0x1, 0x1, 0x1, 0xfffffe00}, {0x3, 0x9, 0x3f, 0xcb0}, {0x6, 0x7f, 0xbf, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r15 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r15, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r14, @ANYBLOB="050006000000000008000200", @ANYRES32=r16, @ANYBLOB="ee52793e9d4455c74c519914ed82654d2368abdf458d26463638607d0536dc93d8c0b9df262a23b494cdd26b874b4a3534433e07cae8a07983c9a0e9d9ee88522aba09"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r21 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r21, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r21, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r20}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r22}]}}}]}, 0x48}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r23, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r25 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r25, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r24, @ANYBLOB="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"/509, @ANYRES32=r26, @ANYBLOB], 0x48}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@can={0x1d, 0x0}, &(0x7f0000000740)=0x80) r28 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r28, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r29 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r29, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0xffffffffffffff58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c}}}]}, 0x48}}, 0x4008000) r31 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r32 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r32, r31, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r33, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r35 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r35, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r33, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r34}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r36}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r31, 0x8933, &(0x7f00000007c0)={'wg2\x00', r36}) r38 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r39 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r39, r38, 0x0) getsockopt$inet_mreqn(r38, 0x0, 0x24, &(0x7f00000009c0)={@dev, @initdev, 0x0}, &(0x7f0000000a00)=0xc) r41 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r42 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r42, r41, 0x0) getsockopt$PNPIPE_IFINDEX(r41, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000b00)={0x4ec, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x2a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xff, 0x94, 0x9, 0x7}]}}}, {0xfffffffffffffe1d, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xbcf1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r43}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x10}, 0x40040) [ 418.267680] FAULT_INJECTION: forcing a failure. [ 418.267680] name failslab, interval 1, probability 0, space 0, times 0 [ 418.308475] input: syz1 as /devices/virtual/input/input242 [ 418.315866] CPU: 0 PID: 19578 Comm: syz-executor.5 Not tainted 4.19.104-syzkaller #0 [ 418.323884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.333258] Call Trace: [ 418.335868] dump_stack+0x197/0x210 [ 418.339507] should_fail.cold+0xa/0x1b [ 418.343427] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 418.349401] ? lock_downgrade+0x880/0x880 [ 418.353562] __should_failslab+0x121/0x190 [ 418.357799] should_failslab+0x9/0x14 [ 418.361598] __kmalloc+0x2e2/0x750 [ 418.365225] ? rcu_read_lock_sched_held+0x110/0x130 [ 418.370356] ? kobject_get_path+0xc2/0x1a0 [ 418.374721] kobject_get_path+0xc2/0x1a0 [ 418.378798] kobject_uevent_env+0x251/0x1170 [ 418.383209] ? kmem_cache_free+0x222/0x260 [ 418.387487] kobject_uevent+0x20/0x30 [ 418.391302] kobject_put+0x1ff/0x290 [ 418.395037] net_rx_queue_update_kobjects+0x344/0x440 [ 418.400519] netdev_unregister_kobject+0x155/0x1f0 [ 418.406161] rollback_registered_many+0x6bb/0xda0 [ 418.411031] ? tun_detach_all+0x850/0x850 [ 418.415202] ? generic_xdp_install+0x3d0/0x3d0 [ 418.420062] ? mark_held_locks+0xb1/0x100 [ 418.424261] ? linkwatch_schedule_work+0x13c/0x170 [ 418.429193] ? queue_delayed_work_on+0xe6/0x200 [ 418.433977] ? lockdep_hardirqs_on+0x415/0x5d0 [ 418.438572] rollback_registered+0x109/0x1d0 [ 418.442990] ? rollback_registered_many+0xda0/0xda0 [ 418.448016] unregister_netdevice_queue+0x1ee/0x2c0 [ 418.453266] __tun_detach+0xd9b/0x1050 [ 418.457243] ? tun_chr_ioctl+0x40/0x40 [ 418.461157] tun_chr_close+0xe0/0x180 [ 418.465100] __fput+0x2dd/0x8b0 [ 418.468390] ____fput+0x16/0x20 [ 418.471669] task_work_run+0x145/0x1c0 [ 418.475656] exit_to_usermode_loop+0x273/0x2c0 [ 418.480374] do_syscall_64+0x53d/0x620 [ 418.484298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.489600] RIP: 0033:0x45c6c9 04:36:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 418.492797] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.511994] RSP: 002b:00007fd17c352c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 418.519730] RAX: 0000000000000000 RBX: 00007fd17c3536d4 RCX: 000000000045c6c9 [ 418.527007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 418.536908] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 418.544274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 418.551979] R13: 0000000000000076 R14: 00000000005032f2 R15: 000000000000000a [ 418.611159] input: syz1 as /devices/virtual/input/input243 04:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1400}, 0x45c) [ 418.686724] device batadv0 entered promiscuous mode [ 418.720190] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 418.746497] input: syz1 as /devices/virtual/input/input244 [ 418.780717] device batadv0 left promiscuous mode [ 418.791612] input: syz1 as /devices/virtual/input/input245 04:36:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1500}, 0x45c) [ 418.887316] input: syz1 as /devices/virtual/input/input246 [ 418.896976] device batadv0 entered promiscuous mode 04:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1600}, 0x45c) [ 418.941469] input: syz1 as /devices/virtual/input/input247 [ 418.960739] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 419.019266] device batadv0 left promiscuous mode [ 419.031333] input: syz1 as /devices/virtual/input/input248 04:36:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 419.089093] input: syz1 as /devices/virtual/input/input249 [ 419.102295] device batadv0 entered promiscuous mode 04:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1f00}, 0x45c) [ 419.140061] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 419.199480] device batadv0 left promiscuous mode [ 419.217269] input: syz1 as /devices/virtual/input/input250 04:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1000000}, 0x45c) [ 419.281764] device batadv0 entered promiscuous mode [ 419.325912] input: syz1 as /devices/virtual/input/input252 [ 419.328012] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 419.370284] device batadv0 left promiscuous mode [ 419.373173] input: syz1 as /devices/virtual/input/input253 04:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x2000000}, 0x45c) [ 419.429526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.439338] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 419.498664] input: syz1 as /devices/virtual/input/input254 [ 419.512696] device batadv0 entered promiscuous mode [ 419.536204] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 419.569677] device batadv0 left promiscuous mode [ 419.575900] input: syz1 as /devices/virtual/input/input255 [ 419.653814] device batadv0 entered promiscuous mode [ 419.709833] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 419.739073] device batadv0 left promiscuous mode 04:36:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2d8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:10 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x3000000}, 0x45c) 04:36:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0xffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r6, 0x3f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xa36, 0x8006, 0x0, 0x20, r7}, &(0x7f0000000280)=0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfbc9bbafb49873d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x94) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 419.932152] input: syz1 as /devices/virtual/input/input256 04:36:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x24, r3, 0xe09, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x3}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x290100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:11 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:11 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000480)='net/ip_mr_cache\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f00000001c0)=""/232) dup3(r8, r7, 0x0) dup3(r7, r1, 0x80000) accept4$netrom(r3, &(0x7f0000000300)={{0x3, @null}, [@default, @bcast, @remote, @bcast, @bcast, @null, @bcast, @bcast]}, &(0x7f0000000080)=0x48, 0x80000) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000100)={0x1000, 0x8}) close(r1) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r12, r11, 0x0) sendmsg$sock(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="b5268c2d91fab7a9f5bd41a6822449a74a9840e50f9487012f4b670560f9a9dfe0d8107aaa5c5a61badc0cbd39662aa04140a29846894845628280030f795cdca63adc876ddcf9eeda431efd79ad8081422c278c222d45ac36d2aa5fc95f8a4de6afa5e20f1a5dc326388f26864ba1476272436b416eddbcd0d6d44bf9207d9147b069b0fa733d4e539b469e5702d1b92b5e08c857e61f78c08d81799c24686a67037195609fc8877314abc46854aa3470e7", 0xb2}], 0x1, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x78}, 0x855) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000380)={0x5, 0x90, 0x1, 'queue1\x00'}) [ 420.011054] input: syz1 as /devices/virtual/input/input257 04:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x4000000}, 0x45c) 04:36:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x338, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 420.200010] input: syz1 as /devices/virtual/input/input258 04:36:11 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) write$binfmt_aout(r0, &(0x7f0000000700)={{0x10b, 0x1f, 0x90, 0x3d0, 0x396, 0x1, 0x397, 0x7}, "097dcdc147d1c5094d294c846c41bbc875fe532cecd2f24ed13e9ef3058ab8b8b6b809e788ee265640bc167df64c14a39057da9cf4cf3a00d9e8db4458ed46145ad324df0488dd380c9fec76399d6bcd1e97676d5eecddf735c9e4a02740ac38d7e609ceff941b1de59ed3e6fe4b78c80ad28f5bdb4c9a128ac826af11", [[], [], [], [], []]}, 0x59d) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 420.263114] input: syz1 as /devices/virtual/input/input259 04:36:11 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x5000000}, 0x45c) 04:36:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x338, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x7012c3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101600, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 420.505251] input: syz1 as /devices/virtual/input/input260 [ 420.570842] input: syz1 as /devices/virtual/input/input261 04:36:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) clone(0x901000, &(0x7f0000000000)="71600e3b75c897cd72e4b2", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="8afcbc2bceaa54964273300416") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:11 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x11000000}, 0x45c) 04:36:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x338, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 420.858263] input: syz1 as /devices/virtual/input/input262 04:36:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x12000000}, 0x45c) 04:36:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x340, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "532880436fd47d1bc67022b15068ca20df441c098b89a4bd870c"}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/23, 0x17, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x9, 0x6519, 0x1917, 0x592a, 0x5, "24c2d42faac72912"}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 421.177300] input: syz1 as /devices/virtual/input/input264 [ 421.260809] input: syz1 as /devices/virtual/input/input265 04:36:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x14000000}, 0x45c) 04:36:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) fcntl$notify(r1, 0x402, 0x1) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x320, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x8000}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x412, 0x9, 0x401, 0x0, 0x3], 0x5, 0x7, 0x0, 0x81, 0x0, 0x8, 0x7, {0x2, 0x8, 0xfffd, 0x3, 0x0, 0x401, 0x5, 0x5686, 0x5, 0xfffd, 0x0, 0x8, 0x2, 0x9, "634a32e7dc28115de88be32d6aca31ea9c2bc72ab67f4934b4c92ea5b4853fdf"}}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 421.528403] input: syz1 as /devices/virtual/input/input266 [ 421.634001] input: syz1 as /devices/virtual/input/input267 04:36:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "f0fd9bee0bfbe13e3fd62bc800137292"}, 0x11) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 04:36:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x320, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x15000000}, 0x45c) 04:36:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc0843, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f00000000c0)=0xfff, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc/core\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0xf8, 0x9, 0x4, 0x80000000, 0x2, {}, {0x3, 0xc, 0x0, 0x5, 0xf7, 0x6, "bf748b3c"}, 0x9, 0x4, @offset=0x1, 0xffff0000, 0x0, r4}) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000080)={0x2, 0x8, 0x5, 0xffffffff, 0x1, 0x7f}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 421.978272] input: syz1 as /devices/virtual/input/input268 04:36:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x5852ad1f, 0x0, [], {0x0, @bt={0x3, 0x4, 0x0, 0x0, 0x4, 0x7, 0x400, 0x0, 0x397, 0x3f, 0xfff, 0xffffffff, 0xab, 0x100, 0x9, 0x4, {0x60, 0x5}, 0x1f, 0x8}}}) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 422.061728] input: syz1 as /devices/virtual/input/input269 04:36:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x320, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x16000000}, 0x45c) 04:36:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4000}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 422.299286] input: syz1 as /devices/virtual/input/input270 04:36:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) sendmsg$sock(r2, &(0x7f0000000580)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a99cb3e56f490a53336f5800c7ce65678b65d9a88bde585dc08cea409288670f0aa883d49473968c23e73b922cd826d028b3528b486270f248c5d1812a91f19f7a2da4cf982d66afdff79b8b", 0x4c}, {&(0x7f0000000200)="6062681218ab02514dbfed8f47e9115ff7a001503d744f70280d8e7b26945d9022b2188f57fb921a5b9679636baf6b3c0a93ecbd21", 0x35}, {&(0x7f0000000240)="7784001ae7fc4bbcd4cb5e0cb083c706c61dd7d601", 0x15}, {&(0x7f0000000280)="de711443d3cd41f525cb1ed735c1578aad1dfe4c11e126a7921e48b10bbcb08bd7abea614cee1b0f6818606c4ba153176a0507f488840c477e7e9a1e565ebf7921fa1f5574", 0x45}, {&(0x7f0000000300)="4cd46aa052cc022e8e24b8c4a618641306563d5b876ed4a940", 0x19}, {&(0x7f0000000340)="44f906895cc134a0490d9dfa75c113b2606dee215f2986d6933f4adaf2a4a75ab400d6765cd4c468aaf9e191e03cde8085a78631bad697359892f3bb5b549c81c42b5bd68b59c35bf45c12dce609757509454b91d839cee992610e46ce97939addcc318943c0e6a3a7b3f6c822415d7f1ecf127e480cdf79ed5d9dc7029dfed98bc68d02e4e0f36c3ca235cbb14188124958c23e8e", 0x95}, {&(0x7f0000000400)="b2d6f085668969f81b90f23bf078bee929538ac6ab9c9fc00257", 0x1a}, {&(0x7f0000000440)="b4a04c073cbaf8646dcd0a27cdc4b2d71278669cb5bcfcd5b5e7229d6629c19c8d90e49bb5010ed445e411fd70ebcf543f739b80443b5f213afb89439f556155d3a86c6953564d30d08c44efbf8320c4355834f2d59a86f6d8341dfb37fbef7d56c7fdd634b0fad6c4", 0x69}], 0x8, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 422.390766] input: syz1 as /devices/virtual/input/input271 04:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1f000000}, 0x45c) 04:36:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(0x0, 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xe52e803ae9ba20fe, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x14c43, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000240)=0x7fff) dup3(r3, r2, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=0x38) 04:36:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x324, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 422.638541] input: syz1 as /devices/virtual/input/input272 04:36:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x10000, &(0x7f0000000040), 0x0, r0, 0xb}) openat$ppp(0xffffffffffffff9c, 0x0, 0x141880, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) 04:36:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(0x0, 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x324, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 422.912099] input: syz1 as /devices/virtual/input/input274 04:36:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff95) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 423.030880] input: syz1 as /devices/virtual/input/input275 04:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x2]}, 0x45c) 04:36:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(0x0, 0x6, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 423.249166] input: syz1 as /devices/virtual/input/input276 04:36:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x324, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x3]}, 0x45c) 04:36:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x2) [ 423.537102] input: syz1 as /devices/virtual/input/input278 04:36:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 423.591935] input: syz1 as /devices/virtual/input/input279 04:36:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcsa\x00', 0x20000, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r13, r12, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r15, r14, 0x0) r16 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x480000, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r18 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r18, r17, 0x0) r19 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001a80)) r20 = userfaultfd(0x80800) r21 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001d40)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r24, 0xae01, 0x0) r25 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r25, 0x5423, &(0x7f00000000c0)=0x3) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r25, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r26, 0x0, 0x8000, 0x2) r27 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r27, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r27, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r27, 0x3, r26, &(0x7f0000000740)={0x4}) kcmp(r28, 0x0, 0x2, r26, r25) ioctl$DRM_IOCTL_GET_CLIENT(r24, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r28}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r29, @ANYBLOB=',group_id=', @ANYRESDEC=r30, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) getgroups(0x1, &(0x7f0000001e00)=[r30]) r32 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r33 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r33, r32, 0x0) r34 = dup(r1) sendmmsg$unix(r3, &(0x7f0000001ec0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="c840d22b5cf2a5ca1cc6df06c8ad073a987e996ed60d01e6131d793d501dc7f28b3b57dea1ba6e10b933935274eca3173621408d49574fc4e590a6e4bfc850e17db852e206e57412e39778062bf2c46dec2cb71528d472ce68c2f6ca1b0cafc9be82b34c8f223f3ad89f8b70f7c4ebcdb80a1d9b04774629289cf855a2b62683f8fac94b00b0b71e194fc37a0b5f5ed5e02457edf851d5887013d8affb89b376ddeed89b45cbdcda28fe", 0xaa}, {&(0x7f0000000300)="00b1413035bc35225d01740ec4398fd88b8a61e95e36f7526a7ad69da1a521709e2dbd28981092684f0e40124116be74a0ca37f32dab8a8993b3b9321fcffcd4058ce1cdd366d807bb64eff9bdcd7828e5899483ae8f571d9d8b6ab33608ad54bb49cda4df8c6ec046efae9f0f5c55ebf5814dfcee8d1185accdd558e784594fc0a9b2ffe841ffb20fefd7d0b5568a00ed530f29c0bcac495360427d99e9e7444460ab34cf9f1c3a50b41debf8cd9d7bfd6de2e9", 0xb4}, {&(0x7f00000003c0)="eb728e61ca2435f65c5faae3e4a2e67ca0084e1d02510d321de4ab46845633b23f79ba13dbb523b0e592146ca90f815aaf01e8c03f607d7505fb673c39171a6789dba2d9d89d69659ecc32f0addf7dddbd10083626d6a44b284d726045670707d172f5165ebf2b26515b3f8b41169ca54dece26b01a33cab1ba0105a691a40507720713967c4dc791fb49757200e7779c0020d32a6d3fb0ef4b47faa7a854badb431c8bac3df457a9187749ddb06809f8d044acc66097fa4a393", 0xba}, {&(0x7f0000000100)="7c30017712046481c0d613b8fbe1e8e39bdb6b527a97ccf5af49855b7c9a98637f7b7b4ec751a19d0150f5ceabf7172bdfcd4a0b3309f0c0ac7cbb0230ef29ec06fafb0fdf1ad0e4caff964b8238066083df3dc8ed59a17f436185132352361f", 0x60}, {&(0x7f0000000480)="370f18085096a3811fc1fce268c5e47d098e3e9fa3819ae27835749225fcf1873f2413cb57b866a968c9695369f12d433cfca90a9ccf6784714e96f072612c0cfffd4ae0d5b1479b0f131a2a6a63030b7e189b1eb35714cddd78de37860b629d56040bfbbbc51d470a7976f17ec10739a24ca9e14c4074d702d32b7545f8aabd449cdc35303e88", 0x87}], 0x6}, {&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)="fb12fed20908dbe76d0c2af043d050718b710e9951855317a6987e4bb48333d4168f2665ff0634c9ebc4ac1d8be85e676cca588336b2b64a5f6a7978db573f7ac5bb37eae8979ebc27c95ad1764cfe93087875bb42fe8ebae04020ea8ccc", 0x5e}], 0x1, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r7, r10]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r11, r0]}}, @rights={{0x1c, 0x1, 0x1, [r12, r15, r16]}}], 0x68, 0x40080}, {&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000008c0)="dd97e10d9c0bdd6fd3a656bcdf61c3d5da8c15fe6f9ccdec65fbb590d0ad9f74ba59c6ea8f146749c73ff754438cb40707c4a6aee04553dbf0bfe051fb202980f42430020e0c86a7f91f2cdeacb8c9aee65fb839dad8e74609b44346e37c34e951e5debdd0b7838bb9e575d7190dedff66a313a4028a5ad75edf91405fc18f0b", 0x80}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="c3b597", 0x3}, {&(0x7f0000001980)="9b6a1e7dfbe138384dc51f82137213396325c141353128bd8f76dca1e176eccf526e611893c14cfae0d0bb0d6d3c1d4483827db3108d5b76083fa0b78b74c1561f90fd47df24b8d113310c2bc2c10cfddbd24e3cd999cfbedfb736317db286005ff2858f3cd2c064d2b7e15779a95549aa88be907a63b772b31f2fec242083a53fafc839f6980deb23f5d7a4cf4666cf1aecf097845d77610037bcdaaec6ca2ff8692e60812f59fee5420f5d", 0xac}], 0x4, &(0x7f0000001b00)=[@rights={{0x30, 0x1, 0x1, [r2, r1, r1, r18, r19, r1, r20, r21]}}], 0x30, 0x80}, {&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001bc0)="9b732cc82e1d9b7f1bb1f879ebc58c2c850bdd2c8a9ecfc1e334cb137d8b5d18ad", 0x21}, {&(0x7f0000001c00)="139b24c42b59a813f4527f34e5e9a06f4553e6e2be8b26d6ce7ecd5d62f508f7ab4b6d7e63e4defa2c0e1518ec92b87ccf7657ad63c342a0153511d9ac9557e2b4334c8050b60fa26368b9dfd28b6fddf5ff04337ee491da89b8f71fe3671d7ce6e0a8a0deb6fe9a089f9cbb9d902d31cb8ea8de7829aaf948de82c32b32a3567a48474f34d90f7adcf8567901190d142c0f362c5d7dd2bad0d436634bfd5c6793bd35ef269bb3067ea834e9392997769ce3e1d68c09", 0xb6}, {&(0x7f0000001cc0)="99e88fb85014dd165d7caa3cc4ca04765368840605bb1af909584f192a595cc132798bb3dc5f2b7b9c792e0141d877bde7b4a6", 0x33}], 0x3, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {r22, r23, r31}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r32, r0, r34]}}], 0x48, 0x8000}], 0x4, 0x400c091) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) exit_group(0x9) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x4]}, 0x45c) 04:36:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xa10000, 0x1, 0x10000, r0, 0x0, &(0x7f0000000080)={0x990a6a, 0x1c, [], @string=&(0x7f0000000040)=0x10}}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f0000000100)={@none, 0x4}) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x31c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 423.830577] input: syz1 as /devices/virtual/input/input280 04:36:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x5]}, 0x45c) 04:36:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 424.040021] input: syz1 as /devices/virtual/input/input282 04:36:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x1c0d4, 0x0, 0x6, 0x4, 0xfffffffffffffffe, 0x5}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 424.160685] input: syz1 as /devices/virtual/input/input283 04:36:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x31c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x11]}, 0x45c) 04:36:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r4, 0x4}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000200)={"0b8a7b05fa9d255639a85627c4a0e816952944c298744b92bf117fd44ea67580155d449b04f1624049705e02c0afe10e4a52f105e8de754d89fbd677128b59ffa60ce0698fc9e73c56e060b581a7937be31cd57a04c9c1c210b0539e0396eb730aba3b30053fdfa34aef3aa701d696ef621a47e8cbeae46c7963e8fbb42f5db59eb9e82706d6aabfcfb0a1344f2b25eeed82c027afe434ffb55e98b04491aa50c4dc9583887b656131883a851e9352944838ccaac9d0ed10caefd6ee204991274af956867bd7a3b7b1f020b991409a4173535c36a637555e46631df1a75b9c0bdc010ca52557ad87bd7107a824aa89b058bf34360fe17b71fd62f4cf2873da3b1c93f601a6d0b5eb65b619f1bb2fce03a0f473d110f808cebfd8a42f0e0feeb19294b9378c9c0278e75bbdf98e79eaebd2327c1ade4fe26661e3b755e6d32db6d9ab1a11afa3b9ec7275d080933dd06ce65c9eec36e6a393a935b90a76b9a256d14ba78bf41bb6b52d6ba00e7af24ad345a150e4af3b90a80d06286040e2ce8c722ba5b427a5c0bc5875b2d73577a8029cd031b59e48efd3cdea6e5aa32ba8d5cdc728df6d46fef025a3a2843074784db16aa5b112a9517291303400cd762a9de7bdc2532a839a5a690e65f05ef600e949adf2c4617b74ac9eb2f0dec8af38b192e44bae544cf50d614311caa24a36e5ec47043efab46cc4d8c250871e2dd6d78ee99ab5af45246c5b87f5622c463eaec2a3984422ecc09b9b9dd7dc94c83583377500f39d25d1f1cad7701f051f289687810e516cbd16c5a728fb734427f71d1cd3a411622c95861bdd2db68988f4301976f55570ce0cf0f012c0e3bcfecadbf76162998a5b3cdc3b005c7eaa5fcf377f160e3fff3fae76c6ad3fefb5ef726030893d54d6117cd9196c08e81022f118df64308d929df34ab72fecc5628f774f0f7c3ac17e858546b42da0f00137a68bf2a3412ca92e090ea07942a61a1be78207ed9aabf0f14d9c62ccd835d764658cb82fa58e3d0ef014bd52091920bcac9fa332d4f99a0b3a435d40e63f09ed9e2633530bfb92894caa6bfaf3555c4c9bfbc282ca8cb960169d4c12476e1a70c21f105b9364859d55ef5c317616acbd6e88a7192a131bc6a3728bbb56681c2e09a9d794aba62bf2831754e8c9177aa22a0497932634a91a45d337aed1201ecdd850dc5109b3f2dd9e93e810ac552a63c410c40f779c2625ba71a709047b138b026ad06a337291922afcb4e02f6a8e991161cb394d9adb01b895d284a6cd68a0db4593aca31ca4b977ddbdd0c1efbc3dd8cac4f975e0314c8965bf88b0800233fc5dabae6970a722182e7b6d3716a9a48d77d7992e36485fe436794187bc9865ee2c2458d149e681995aa28a2d1918a6f1d8b75ee3cc34fdcb4989702a3f91c8bf4870d5e773428ade072ecb9b8a6ab2c36b"}) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 424.452068] input: syz1 as /devices/virtual/input/input284 04:36:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x314, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 424.541158] input: syz1 as /devices/virtual/input/input285 04:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x12]}, 0x45c) 04:36:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 424.734299] input: syz1 as /devices/virtual/input/input286 04:36:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x314, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x40, 0x8, 0x5, 0x9, 0x40, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x14]}, 0x45c) 04:36:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80000db, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xa975, 0x9, 0x3, 0x9, 0x6, [{0x8, 0x1079, 0x7fffffff, [], 0x60c}, {0x3, 0x7ff, 0x5, [], 0x40a}, {0x6, 0x7fff, 0xad, [], 0x108}, {0xffffffff, 0x80000001, 0x20, [], 0x80}, {0x200, 0x8001, 0xfff, [], 0x300}, {0xda4d, 0x80, 0x6, [], 0x400}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x20, "35ef74"}, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 425.016513] input: syz1 as /devices/virtual/input/input288 04:36:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x300, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x220, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, [@NL80211_TXRATE_HT={0x16, 0x2, "2322ef9c50685b8d98eb7bc5fa85984e8e3a"}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 425.112038] input: syz1 as /devices/virtual/input/input289 04:36:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffd8e, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x14cff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002dbd7000ffdbdf2502000000050001000072656775617264300000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0xfffffff8}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x400}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x1) close(r0) 04:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x15]}, 0x45c) 04:36:16 executing program 4: chroot(&(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x700040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'ip6erspan0\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x800, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xff, 0x117480) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x80, 0x2, 0x9000}, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r4, r2, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) 04:36:16 executing program 2: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x4}, r0, 0x7, 0xffffffffffffffff, 0x8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x48400, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 425.414024] input: syz1 as /devices/virtual/input/input290 04:36:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2e8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 425.581715] input: syz1 as /devices/virtual/input/input291 04:36:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096}) dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000006dc0)=ANY=[@ANYBLOB="1c2400e4051508cf479c5856a7edf5f000", @ANYRES16=r3, @ANYBLOB="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"], 0x241c}, 0x1, 0x0, 0x0, 0x4}, 0x85) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x5, {{0xa, 0x4e20, 0xaee5, @ipv4={[], [], @remote}, 0x1}}, {{0xa, 0x4e21, 0x20, @empty, 0x9}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpriority(0x1, r3) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x16]}, 0x45c) 04:36:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x1c, &(0x7f00000001c0)='em1vmnet0security\'/selinux,\x00'}, 0x30) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) r8 = dup2(r5, r6) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x502, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004481}, 0x40000) pipe(&(0x7f0000000240)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r13 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r13, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r14}]}}}]}, 0x48}}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x200400, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r16 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r16, r15, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r15, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0xfffffffffffffee5, 0x3, r10}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="72bb0600"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 04:36:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2e8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 425.890241] input: syz1 as /devices/virtual/input/input292 04:36:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfff}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x10]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xdd6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000044) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r5, 0x0, 0x8000, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000740)={0x4}) kcmp(r7, 0x0, 0x2, r5, r4) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r7}, {}, 0x7f2b15d7, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x4, 0x101, 0x0, 0x0, r8}) [ 426.016197] input: syz1 as /devices/virtual/input/input293 [ 426.023509] device batadv0 entered promiscuous mode [ 426.049734] lo: Cannot use loopback or non-ethernet device as HSR slave. 04:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x300]}, 0x45c) [ 426.103436] device batadv0 left promiscuous mode 04:36:17 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x940, 0x1}, r0, 0x0, 0xffffffffffffffff, 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/4096) fadvise64(r2, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) dup3(r3, r5, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r7 = accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000100)) syz_open_dev$admmidi(&(0x7f0000001200)='/dev/admmidi#\x00', 0x2, 0x8000) sched_rr_get_interval(r0, &(0x7f0000001240)) r8 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r9 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x200, 0x113) pwrite64(r9, &(0x7f0000001300)="4196003c48da7f373399c8e4899906cd3a6321bbe3f4c62df1b7890104000000000000a5debcbcfacb70ff3eb6d90097918d38630da86b8246c15de3a6a6ec23578e7b1598929debd9260a8d641e0ee163dd2bc7a4f9d6d114eceb7f81b3b70704f4bb3cb470c22087267e27f8767654e1bf865ed40374c0a571936a37501a2799a763c2143b266cbe90c3e4d21c4a18c95f823fb3f7ece08867bba9a868b894ea32c0b8920e6b31c672caf81f8ef11dbfac575229e13d72e24f573fe2a117f4f9994f9bd79e09509ddce715cf0965956683e2b471f4da2cb4544a17f27a12d2e3fe84ad3bb45d82bca4425e6385cbc5731108e55042e6fd91efd24b08738f19b3433a0fa3974798a694", 0x10a, 0x3) write$P9_RLERRORu(r8, &(0x7f0000000040)={0xe, 0x7, 0x1, {{0x1, '\\'}, 0x2}}, 0xe) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x420000) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x62600) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000140)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40, 0x0) socket$packet(0x11, 0x1, 0x300) dup3(r2, r1, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) [ 426.253800] input: syz1 as /devices/virtual/input/input294 04:36:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1a39) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000200)={{{0x8, 0x1}}, 0xe6, 0x8, &(0x7f0000000080)="aac2d631772ad4ed9bd6fbd3be1153de029247367c7e4560f4923deb9b31ab392ecb201d808633bffcec9672445b83bc08898a7acafae30205dca2fcfaa36ce4e291879ce18c8c98bb5ac5ae3b0a25e3e3ff3fac0242c1be1de2bdf2497ceef4b253b822c0157537ac798bd0ec058807bf1954bf926d1e639121f87133fe3c32855a91238c66f462765e1c3870c08876dd0321b393d267347d981e0213b47b350da42237544781527b13f5eb754398b996c97d4c6dfe5c0acf1dd6bcd23477022c41588379d06311e4b23eb9ee0e16deddc5b9b03a739301108f1b7a44e13b1bc7bce21ce9ca"}) [ 426.323261] input: syz1 as /devices/virtual/input/input295 04:36:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2e8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x10, 0x3, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:17 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r0, 0x9, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x68a40, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f00000000c0)) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x500]}, 0x45c) [ 426.560940] input: syz1 as /devices/virtual/input/input296 04:36:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x200000, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff4e, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x2842f, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0x181000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x479, 0x7}, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x200048c1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 426.615876] input: syz1 as /devices/virtual/input/input297 04:36:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x1f9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r3, 0x5, 0x7, 0x8fe, 0x6}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, @ax25={0x3, @default, 0x4}, @can, @isdn={0x22, 0x0, 0xee, 0x63, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='team_slave_0\x00', 0x5, 0x1, 0x8001}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x1378, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1240, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "c22536c37fd9a195525a351d05101690bc73dd9c1c1ce8c29ce64f62cac52b3772c2fa24a2996a206e4a9f1dd6dab3b8d59925bd8820e08b840e270fbda2eea1678e60e6898c7a1c0d9c8207025f295f8df2c0d43cd5700d118d4b93f0974fe59e8d167a39415a06d5d44c132d4190e36688f2df9f589f923dd548d1c23dae4800a54343e263767184ff16f964ff9e43556c1c1ec766484addecf1aec3dcb69adf62973cb950574e3a4adf8967dfa036ffea964d65c3d5ad1b2fe075604eddb03a113a9bd288d1f233554eca9685bd35f0fd3aaa80e4ed6b24b42899"}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'selinux[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5d}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'net/snmp6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67db}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc5d2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'wlan1]{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '%,\xe0+vboxnet0.#\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'vboxnet0-/)\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "9cdda0bd182ea3970f684007d9f80521ddadcadfe74a035038f55e70ffbeaf8c904bd086e26a923a0e3c79a3d7066b4ef6876297ba8165112af4302b8c50ced807f33460ef00521f4d168e8b5e747001f7448c33baa19183e0b41708b4f69a0c78639e81175135cf61025ec981005cae6ac81306a6e6b9f25679dd9214dedcf13cedd30ca6fbd62c3730bcbe247127ad1889e47f60dec49d2e1f87ff17213aa8740d6d6b052f70ce1de20e462b1b2ec39518cca3e2206582dc43f0b1238921d5d2aad69ac01a48d8b642dd801f672b8089c2530b69ea7bf14672499b67fb95bdc855e51b7e257b4693a7bbe57a48c0b7849b4f0f340878f02846c435137818e4f30e7a85d49e3cb537142ce90baddc5ae3c4763defa041541fbc43fcbce859cfd4ec3d90a5161d28d71ee13f8adf52475c5df309c1d9217c052d62570d7302453900ad391b8750ab934b7d617f74ac29bad4bfa724728003e5cc2d04b1b79ab9c26073b7584222b38344529dc57766c1ebb7199f2b69a2b3a77a4164df67847832b3c3238ff6eb775f022b8ccb9b8b9a0997ccbdce0ad50f1ea672496b89821dd6817d5ad972fc7e90943b1378b54ffd291f4a0be9fff74c705e432f185576cec7de1cc4bb6de87d79e5cb547107298ba1dcf1a811605fb9c03792de9abbf168d1188ce2ea688c84fd0c4911cf399b5517071984a8e5b96b763b7b3781000890b36541c12cb640789df707d6e5654bacc129cff68a57e86274f0cd4bcaae4aaeff2b51aa1e00831d6200d3e7443f67cf2a888bc2d5ecc02e9557d5555226350c210b441ed178ef2da467b90a7dbe11c2f6294f8d40e0c12a2dfc723dd2b4a248065b92d7d6c70a906b25d306fdb6d877668d3f5b015c925aa9e1b5525b7403f60cbb3efc09bea4b0ef201e196b4ab57a00944a7da4f408156b902eb8dc9973938e3ef7bcbd20292226ac31d1bedc8a7a6262b438fc6af6dd32a89cef0a12c2c860c7a1615c1fce584fce28c5307404e196dae5c3aa74603ff75677e0324df9667974e998a3e88c96ea7cf6b650c26809f1b698ecc1af05bba4850b613309e1106285721fb319b4d64d8582a652afc49da9800824e291391dbb8da82b5f063a1e5697c39011d32f9ea55271edb2f52ed3705236ba9599f1ca8fac9c3ae3d9fc302510a40ae7503354d6513d4f9d12debaa7711b78274a681774689dcc8296a204d170ae242c7c95f83f5ae67debaf0f850d7c988178181c294cae2290ef5685ac64a41de5711e8469798a213f31aebc6054ffc5ffd52a3baade52782b8d6d90ef7baecd6605f5a09b60e9f2ad2c88c32e674de61b2f3e230fef53b0e38858954ddad6190d7a1e1d79228446626771d4ae807a66cdcbfed275d39133072cb5ed36945afe74b995ebbf4223e2437bbee702fd4631b8a279f7ab3d5dc56240d3e03e8b6f11715ebd2d964fdf99841783060a2fad905b1eaa66243590b59afcc97e8c7cc644c491cb0fb30387e119338992dbfb4740d5f0718cefd637310ba8a45e00ecfd342023221eefd7d9bd6b747f2f14373e954df0a0bca98f5188be50a6a3911fe933482f68c3060e7c3f8231ce42632da167387b14de0ae90da6b02c355d0eb15e27b781fc357e2a209666cf5626b035ef66f2d1324d1ac14edf746666bbdd6c981e9777c558e012975cf6e99e308618cb3b0d47c620cd97d327c562ced1c98af925bce339cf8f35c35aae9a60cffcda19311b6a0c79c75bd7d7a1d76a67e069be76708b70afc296f1ab9e52e130eecadfd7a369c1ab575071dbbfdcef517540f502efd9cc9b1d576e2e843ecb4d42a140a80ddb559b5f3eeccea397d94b67d2d10fec7bec03b5f35d55e50f00aa15676189ee38f10a07097b6713672cef0c50e5dfe4bd7d08766cccee81ce11ae50b684e9f5cf28ddc275e33af174568f9299a95d4966a477092f11f8da6d14434d12280d15da69867f93b7a89f896ced99fbf131790caab2845c5afb59a55a09ce61e719bd5073c6c52ac65a7a40cc864bc1d9fa4d430586236bfe9d7d874420634f871145e2e0dccd48af64df8c8ca202f6c6ef6889dcbf5f287d5112747154de46227b9dd5ff621c3d58534904200d34a0f7fea339ef76f3517c17085093cabce02fbd4c9bc71a8d140f1c380ce2d0ab9c9746dc99095c0c40421e0747a01db9c32611322efddc8b700852b7dcd4182818ba4d232cf9cebee3844f36146b88cbe1399edaeb4d62d6472665819afd363f6f65d6438424b14d2aecbee3d24e2fed52829d825db52845d3322f2f55ae4f39c0c7f548b3fdbe2da20e6752747b60bf3f29057bf4ccc8ac9ae4acf4a3eca0c01457ed9ee1ea1c890674d1db281c47e8e03bc721ea989a88bc8d65a3fe045af5cb95083cdf6e639e9ee831cef96fe0bd8a5627eaeeffaf1574f3bcee232ad6404c82d041ada5e6eb4a883196aeceefd0a35eff6a7c68e7a86dce2e7d48d280053c6dd9fd990a7d8d3cd4be239f2ad1422407ead0d58709384131f07d6f0b713655fec63511f4a72c25710506d63d69e976d8a58da3b9d7f3df680881d61869a7b3e8e3f46bfd8c114ecbb6ec17acd0f2424ad6b830a5c12a96ba2626a07c4cf18957a9294b9a0ff9c7f2c5b763caeb011e460940042f7b02be06ab9bd223c46fe35571774ff9d27fb402b66efaa3f0f07968d5d19d4f5cfd1a71b1ff2cbfe233904e168068f782bb0af0c9bbf54d0107229e462590ecf126056e883807182898cdc020859ef20f0655ab0f34b4ac54117ab58bd865bd31d981d9daa62489017a67e79f8d8e6509de276dcd2a026778e8695998aaab34257aa3f227bb029b67eac2d4d70b152eed43026827d4d752a0e1ec562a2a7160d0a853964efeef2676921c1e552dd65baa7536dfaf78c2906ec0be6744a816eec1f0dc89519192793f60af66402f6a63190071307a7cf32af7afca2e86b8f3ce19ca69a214bb0c25e071ea41ed0fa7a79812a7adc376b96b392c2047a444f165282408e42ad29a347588996423a24a613bbc45dd0df23bf0dd8796f487a0742b84438806b9924212cb09abc78b01cb6c0d3f8269a7c56ab48bc36c2e2902cecacec9e26f7263b92c8d706df8e1ca4942391b12c4515a8736067a1a6b437d3ac637e33885da64e204e614d870fe3fd524ead3e7e82b4e21854940a46d63945a5712a4c2d3617116a3278d3f56f77994c7be2bef74cd4fd74a83482689f5c1a4b0b7a9d1680c25d832476c77f5920a99d5fe6f918565486ecfe300e94408432d85711f68f3cdd2a298d1ba428ea8f24efcd90c780d1fff608249e3beafd1bc97510c86ce9fadc34f7330331da42b20c3715b569e28c5b3e5de680478d512c396b1dfda44982b33822aa28e2be77cb53898924d950deb000f031dec613ef1c65b22551a244d5ee40ba597907079e8f29d003cd30e3ef3d13e12050e538180bca68c96a3faa98f4742b6a5141b1558749cddc396bba727d62ea52dabb77639e6f9c444f821bd60237e4ca6e9cf8ce392770d46ece6eef3d407d3f5607dad419b8f3121044498e7580e03b8da8fbaeecc8bdd121c958c8f57bf17ab4a2b857c886685eec39977add568ffe25109460e94b3b4b60c55e19dc1d22c43c22102cdf8c7cbae7f486b2b8ad26f4a4be889d297a93763988c361ed03a1b813a13db39542673777cffa0c9229ac86c0bb795bae6eb84950eeff6738515ef541d8a48cf9d809319afecec27b4da5b708422cd03e81e412616baf310edc4f0ea60f66f8f93a3fa896ed7e69f7d7a4f63cd52a26e5c297422c64b9fca510e025562bff731dcc1b7cba67523f900f61e83f04f419127633f9f3e51be2048b37be3c65cbf5949dac501cc7ae679c20aa32ec610da19834735818ad52fb09b135bd43cde562c57bdfc50cef29f8135e7d3dca12809ae0c089d71a46deb5e520c99c72509b8bcbc975aa7f48b08ef48834c8819420d50c5cb9fa10188ead2350c6e7afdbd4cc4485beb97ef912f467fc6b9401c321f42a31cb29e956874b94c0f1bb0eeb84c1d2cefbbdc266beea8347462a9c1910b55ce1ce49e66f1ccefa06c1e109395ad575f96a22e6777fb1c4bb75d5ccb121c5269727f02aa3452349584bd5c59c82b11316d8f608f0a88c6b38695aa2def9f62dd907d06017cf6e6ffffc432227c235e05ad36fbf166f86219c53f367207eb17f44d1d0d69ce3ad6dfde5f22fcc5610428d8431ae3d67df2a27255090eadd87591e26c1297da65e788c527908f0502a075a59c50a5d73413bc41abec44b6c749ca58facf5f0de571bf48ede13023a8c555999f416c4dfc33a009b2aee33a612c59995af0629cb3de1deeb0f73f907cf44a8a1097c3bee80e5081b2584989a0df3c55a1d77ddd85044d52bb1abdc973bbd1d43db6e32d50cdc850c8f63fa8a618a90a01d772b2fb45674c20acd4470d94bb540aa838dd9ea258a04f7019daa3420b134daf834814bdef78fa1f7dcee0141a3420ff4b155fdc0705ce0944e39ac3ba69d127edc6285901ce08d0be0829f3885107fa05a1451881c76cd0eab8360a4a8a4245ebe7da7e77091a5cc0bad688988867ccfa55f5efb13b4ee345cac94a236aff59d4d7e66ab6925db5007e3d6b188b6bdbe97e79e361d829f5e231735ecaeac8639b44a18622bf960dac3ce8a30a8223a0458207e668deccdd3071b5d0289538dd922b6d45e61bec790aa394ab061e9b276b491575e8c11c770819a9ff3b7f0b9a6df26f8322ac55ee36a0b5f89d38a670ca1d5ebaec212f5d42c67880c46e46e124ce8ca2d96118edfff76563af03b1f6637aa244c8b3d439efe297d25f5bf50b3023b0d3aec61a4c2d669eec9df7ab3c41b38f9483a8b916519d118330ccd2b567c0cfaceb22b6bcc19000c7b27645f793db6e5ccd6377c961ca5df70f6def6debd291e6859fd80065980f96a1edb9aabce7042635d465e56fdd0d3ffa178a11004d8a8b736e97a8ac70dbfab8b2ca8e635c9e99f14b3d8aa59fe01bfc96926d57e06479e3250b4b710590790b00e5b9c994a7ba4b61f508149753dcf027908c6f7f59e6c4c701c9a39276dea86baf1cb30f1d0fb83b25fb27e318258e73313201d1309e3b1051ab7d0aba1ea5d8d0b171a1062bc5cd999aa5fde980509708057eb08f1e03d9026080eb8cce1a63afb22f20012cac8b10fc286124bffd0af414921658bf3278ab14c96bd6e25d6ff3b9ca18320155601e64d5ce46db413fce281ac6b7dde73fc277e0c559e2586e83b5e3b88d97fdb419f56568a9a9d2b44db7a98e20d5a9ee104c116e5e194b1915284b8a74e986d410f2da08da1ba9ee9c3cf2d1a4f39e30f4e3b44ff227731b17d527602991904177dc8b4734966389dab8558bb59f68f91bfc93ce92696c0390980f9df9e54150f5f504a80fda044e45d0a1a3121ec365bdb6c3eb20eb6557f48be2646e0a2212ab46936ddd9948a7c584f49a7ad3a215f1257a644f31b1fa4e1bb17ab49177640534dcf06885086e3c6cf6122728eb5bdb45d68da0f30274384d888596f7fcd0b733d235bbb463534142dd9c66e74898051a9fbc0d2ade98315f5da88c41814ef0b32e736b1262690a60ab399c54adab4f54048bc6e313e8b098467981a3fe179c053e59461d519e50a7846f5b66f916a218edcbcb58ad83aab1314bd2e8897e27002fa841bd744125464bfb5e23b0a1203e5979f47812542addf08266279b57474680c5d323f446d07f96f70d15b447fe396c8c0fe60ca8806e93c3e88303e0c37cc6"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4b}, @ETHTOOL_A_LINKMODES_OURS={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, 'vboxnet1vmnet1cgroup\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "4468a6fc16f498b782b077396d6a7386ee2705009dcd7389e063f0dc2a6a911b9201a7cce16c5abffd995ac648146320136ff552fbac1e236d942cfeb7e29b9e10cb32308d47c751d3f96dbde99211eb321a7b02b26561224646f452ed0b177a1bed2e49d597847d01771df0ca28608101517fc8869c07f20912ca79118bc862a1973dc78a0b04603493f16c068a9f2d67faef5e7dfcb384ce05f50c9f5436b7e07d45a4a75f4d675ece280cdaa82b9277fcb437238e0bc9cd3c63a11535e19a5a602afdb39992"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xbb}]}, 0x1378}, 0x1, 0x0, 0x0, 0x4000}, 0x20004051) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2ec, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth0_macvtap\x00', {0x4}, 0xff}) fadvise64(r0, 0x81, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0xfe51) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bond_slave_1\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1100]}, 0x45c) 04:36:18 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) close(r1) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x40) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/4096) [ 426.960902] input: syz1 as /devices/virtual/input/input298 04:36:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 427.021675] input: syz1 as /devices/virtual/input/input299 04:36:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1200]}, 0x45c) 04:36:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2ec, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x52, 0x81}]}, 0xc, 0x3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8a200, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c4805}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) write(r3, &(0x7f0000000200)="a2f99ab9861b1fc9473afb7b130bf6624b00953edaa6b5b0368dca8567106f1f7d9c64d30aa4cc9a232bae75f0e58ba0dc259dce3a8e8ba4b9a7cf4a54e2a41e87363c282c6ef6bb231fdd8f762aa6a0d6cc2a9e6ee25819b2b3cec33fc7bb48a1e232516fa1cfbe85b2ded2c5b1e7cfb309689db25f841fe3751f1aff5a0bc6b00e0c11c4399e25c7a7cb42bc10c8c1376c9bfd9a2b18ead383f9d5e7113dfc48aa790e6d4a4494444f0c1b06d81df20b476f36c9f500a051c1c392f977dadd6ddbba03bd8af7149a22f7e85eab6a90b9f58049a10b52ac02e689e5ae9d", 0xde) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000b67000), &(0x7f0000000040)=0x4) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 427.293870] input: syz1 as /devices/virtual/input/input300 [ 427.361821] input: syz1 as /devices/virtual/input/input301 04:36:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2ec, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:18 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x9, 0x800, 0x2b5e, 0x0, 0xf}}) 04:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1400]}, 0x45c) 04:36:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='ip6_vti0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff53}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2e000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000100)=@generic={0x0, 0x4, 0x8}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0)={0x20, 0x20, 0x8000}, 0xc) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x8380}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000100)=""/85) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@null, @netrom, @rose, @rose, @netrom, @rose, @netrom, @null]}, &(0x7f00000000c0)=0x48) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 427.631810] input: syz1 as /devices/virtual/input/input302 04:36:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2f8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, [@NL80211_TXRATE_HT={0xd, 0x2, "2322ef9c50685b8d98"}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1500]}, 0x45c) 04:36:18 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4000}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r5, 0x0, 0x8000, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000740)={0x4}) kcmp(r7, 0x0, 0x2, r5, r4) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r7}, {}, 0x7f2b15d7, 0x3}) ptrace$poke(0xffffffffffffffff, r7, 0x0, 0x203) 04:36:18 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 427.912133] input: syz1 as /devices/virtual/input/input304 04:36:19 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x180, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000000c0)={0x18, 0x3, 0x7, 0x8000}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) fcntl$getown(r2, 0x9) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 04:36:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2f8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, [@NL80211_TXRATE_HT={0xd, 0x2, "2322ef9c50685b8d98"}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 428.041313] input: syz1 as /devices/virtual/input/input305 04:36:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x1, 0x80dd, 0xdc, 0x89d9, 0x3fc, 0x3}) close(r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2000}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1600]}, 0x45c) 04:36:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000340)={{0x5e, @remote, 0x7ff, 0x1, 'sh\x00', 0x20, 0x2bc, 0x48}, {@empty, 0x4e22, 0x10000, 0x7ff, 0x9, 0x7}}, 0x44) fadvise64(r0, 0x0, 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000080)={0x1, "792e58173f30e222891981773be539205a1c175bde3547835515d28d242c80c9fbe666b28d35c3fbc1d513e04d426c3f192d6613d96ab2ddf57735a9a4a66f7e", {0x9, 0x2}}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r8 = open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x160) getsockopt$nfc_llcp(r8, 0x118, 0x4, &(0x7f0000000400)=""/27, 0x1b) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000002c0)={r7, 0xffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={r7, 0x92, "665dd72f1a3577ba05b4447bb2d6033186966262a449c0bb1e536dd19bdce4392ecc23161e46464152b70311ef869ed0587599150d0f37506e05c8bed1bad54359a13efcd833eed9589fd21ef79edeb8400fe0c04b874807f53b4d56107027fbfecb8dfa3af73e10a57c05edcb4e399c0242ef60a188f7f117852f8136f13d9581f5222748b37773b1029669f5a7730b65b9"}, &(0x7f0000000140)=0x9a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r9, 0x7}, 0x8) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffff50) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 428.318162] input: syz1 as /devices/virtual/input/input306 04:36:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2f8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, [@NL80211_TXRATE_HT={0xd, 0x2, "2322ef9c50685b8d98"}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:19 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x290740, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x101400, 0x0) dup3(r0, r1, 0x80000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'dummy0\x00', 0x100}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x408080) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000300)=""/4096) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1f00]}, 0x45c) 04:36:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000200)="f8efb73060c8c69f8434a43a7a7713da6aa398a791eed5820c6028abcab4bf6e2cb95b4c5d1b4b41f3804b0561e14993f86eb8c3df006987bf7a6c6eb6ff111d8fca5e8532d4bc51634e1991fa4f23db87e9a7e42e9ba91929743617509793effb9030b27375a3d4ed8900a72940430c26c8442c25e431a34ef518e74eb852f7d8452281488504f72920cf35007dafa02e64ac72091bf265bfc8275f21280300dd3cacd6f91dd20bd915aeefd5b9124d4242723bdf64da6a9f3910f4fc3e81ff5daa2babfd0b3c5837c95063b3dd6ab63ad0676f40bcd476b049", 0xda) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffff, 0x200, 0x0, 0x1000}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20008802) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x81, 0x4, 0x9, 0x4, 0x6, 0x3ff}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000140)={0x101, 0x2b, 0x80, 0x1ff, 0x19c, 0xff}) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x480) fdatasync(r4) [ 428.620908] input: syz1 as /devices/virtual/input/input308 04:36:19 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x8000) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x75, 0x7fffffff, 0xc, 0x9, 0x3}) close(r2) 04:36:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2ec, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1000000]}, 0x45c) 04:36:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 428.840040] input: syz1 as /devices/virtual/input/input310 04:36:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xfffffffffffffffb) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r6, 0xffff}, &(0x7f0000000300)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000002c0)={r8, 0xffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r6, 0x7, 0x8, 0x8001, 0x7, 0x9, 0xc781, 0x13000, {r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x9, 0x2, 0x7, 0x8, 0x6}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r9, 0xffffffff, 0x6a, 0x5}, &(0x7f0000000240)=0x10) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:19 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x4801, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="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") 04:36:20 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r3, 0x0, 0x8000, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000740)={0x4}) kcmp(r5, 0x0, 0x2, r3, r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r5}, {}, 0x7f2b15d7, 0x3}) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/psched\x00') ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 04:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x2000000]}, 0x45c) 04:36:20 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x23b9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x4004804) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x5) 04:36:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2ec, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 429.154401] input: syz1 as /devices/virtual/input/input312 04:36:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) [ 429.225481] input: syz1 as /devices/virtual/input/input313 04:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x3000000]}, 0x45c) 04:36:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x404502, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x0, 0x10000, 0x7, 0x3}) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa001, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x3) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 429.441817] input: syz1 as /devices/virtual/input/input314 04:36:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000080000002c3425c6027f22ed00009d340d60a972bbf63d54a4870bda0b765b6c568b60f157b1d5acb7f6b3dd445678f5027f936ed08ebd1f1c57cca96c6ca86eca1c3c29b0a6fdd694c1e577dd07206106b477bf149abec0dd9d5e1b776c9942dbbea6246f3e7ef37da15dba66bb61ae4b5fc830b5a040ccaf118c5537b3822ac4a0649d6d44646a66e472e1084effa5e13ae4309240ba821c52d9c65d4e75c0e24612cf17934b0d18"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000540)=0x38) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f0000000080)={0x120000006}) fadvise64(r2, 0x0, 0x8000, 0x2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000740)={0x4}) kcmp(r8, 0x0, 0x2, r2, r1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r8}, {}, 0x7f2b15d7, 0x3}) syz_open_procfs(r8, &(0x7f0000000000)='net/nf_conntrack\x00') r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r9) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x22c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:20 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x4) close(r1) 04:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x4000000]}, 0x45c) [ 429.646060] audit: type=1400 audit(1581914180.647:144): avc: denied { block_suspend } for pid=20361 comm="syz-executor.4" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 04:36:20 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 429.691708] input: syz1 as /devices/virtual/input/input316 [ 429.771116] input: syz1 as /devices/virtual/input/input317 04:36:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x22c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x5000000]}, 0x45c) 04:36:20 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) getpgid(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r1) 04:36:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 430.069495] input: syz1 as /devices/virtual/input/input318 [ 430.170877] input: syz1 as /devices/virtual/input/input319 04:36:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x22c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x11000000]}, 0x45c) 04:36:21 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x420000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0x5e16, 0x3, 0x0, 'queue1\x00', 0xa8}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x4000800) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x280b00) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)=0x1f) 04:36:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0xa20000, 0x5, 0xfffffff8, r0, 0x0, &(0x7f0000000040)={0x98092a, 0x8001, [], @p_u32=&(0x7f0000000000)=0x59b}}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 430.437852] input: syz1 as /devices/virtual/input/input320 04:36:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x224, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x12000000]}, 0x45c) [ 430.684258] input: syz1 as /devices/virtual/input/input322 04:36:21 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(0xffffffffffffffff) 04:36:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x224, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:21 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @multicast2}, {0x6, @remote}, 0x28, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x10000, 0x2cf7}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x0, r6, 0x2, 0x1f}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r1) 04:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x14000000]}, 0x45c) 04:36:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1, 0x8}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000240)={0x3}) dup3(r4, r3, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={r5}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r2, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 430.986562] input: syz1 as /devices/virtual/input/input324 [ 431.069392] input: syz1 as /devices/virtual/input/input325 04:36:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x220, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x8, 0x3, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:22 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x0, 0xcd, 0x2}) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x5, "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", 0xf9, 0x0, 0x2c, 0x4b, 0x38, 0x7f, 0x0, 0x1}, r2}}, 0x128) 04:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x15000000]}, 0x45c) 04:36:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(0xffffffffffffffff) [ 431.299446] input: syz1 as /devices/virtual/input/input326 [ 431.425788] input: syz1 as /devices/virtual/input/input327 04:36:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x220, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x8, 0x3, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x16000000]}, 0x45c) 04:36:22 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000b5b03f3fa8d40fcf3b234f21939374ef772ec71966bcddf39b01b774011bdb2f864e40896d6698df9ee65e500c0096189caf0a249dd0c5f1eeb0f095e37ae763ff17a76717a051fb301b9af17737a3f25a8ac8d343dfd6148e84281c00d772963be596f91a75ab967b1937dc8c665aabd6d2724722f715b3472a193dcd7f91c5c86a59b521bfdb54", @ANYRES16=r4, @ANYBLOB="00032dbd7000ffdbdf251000000010004c0001ac0f000c7a08000eac0f000400160108004900040000006400a6800a000000ffffffffffff00000a0000000180c200000e00000a00000000000000000000000a00000000000000000000000a000000aaaaaaaaaa1e00000a000000aaaaaaaaaa3f00000a000000aaaaaaaaaabb00000a00"/142], 0x94}, 0x1, 0x0, 0x0, 0x4000849}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r5) [ 431.669912] input: syz1 as /devices/virtual/input/input328 04:36:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:22 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(0xffffffffffffffff) [ 431.753769] input: syz1 as /devices/virtual/input/input329 04:36:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x220, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x8, 0x3, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x1f000000]}, 0x45c) 04:36:23 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) chroot(&(0x7f0000000000)='./file0\x00') [ 432.007101] input: syz1 as /devices/virtual/input/input330 04:36:23 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @multicast2}, {0x6, @remote}, 0x28, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x10000, 0x2cf7}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x0, r6, 0x2, 0x1f}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r1) 04:36:23 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x8, 0xdc, "ff4b6ceb62f266676cafc539c63bebff0ec4310a5c05c73ef64c9fde565b3c443acf1eaf13ce95af3886793632485dabc07bf25f1420e7c1347f466616266b74b58332e8483fc31b5a9444db3a5ed1ac8f7633a6d12757a9c484b7a270981e83fadd5a9fa4569801a21bed8b739bfb8da450e1c389338cf8cc109a93bf11137befe8294f7d573fe881a170f1861a53e46b8c0587fe45bbd5d28fe97dd604f0bfdee6d4474a9796b18d8035efbf927ddc92392f6922857897ca8efdd12c8b5bebf7c00b4f3f1303f66ff64b23b6772fe6eab0dcc532414f427badf691"}, 0xe4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 432.151346] input: syz1 as /devices/virtual/input/input331 04:36:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x21c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) 04:36:23 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x4) close(r1) 04:36:23 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0) pipe2(&(0x7f0000000040), 0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10) getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000300)=""/122, &(0x7f0000000280)=0x7a) dup3(r2, r4, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r11, r10, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000140)={0x96a, r12, 0x10001, 0xfffffffffffffff8}) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r0) [ 432.459324] input: syz1 as /devices/virtual/input/input332 04:36:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) timerfd_create(0x5, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c0, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x2]}, 0x45c) 04:36:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)={0x80fd, 0x2}) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400141, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000400000000fedbdf25070000002000060087dcc562c3840a8b7ff89bec4cf3d8fb140005000000000000000000000000000000006d59db96eaa452030000000000000000000000003508000c00030000000800040002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast2}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x850) [ 432.726546] input: syz1 as /devices/virtual/input/input334 04:36:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r4, 0x8, 0xdc, "ff4b6ceb62f266676cafc539c63bebff0ec4310a5c05c73ef64c9fde565b3c443acf1eaf13ce95af3886793632485dabc07bf25f1420e7c1347f466616266b74b58332e8483fc31b5a9444db3a5ed1ac8f7633a6d12757a9c484b7a270981e83fadd5a9fa4569801a21bed8b739bfb8da450e1c389338cf8cc109a93bf11137befe8294f7d573fe881a170f1861a53e46b8c0587fe45bbd5d28fe97dd604f0bfdee6d4474a9796b18d8035efbf927ddc92392f6922857897ca8efdd12c8b5bebf7c00b4f3f1303f66ff64b23b6772fe6eab0dcc532414f427badf691"}, 0xe4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) fstatfs(r0, &(0x7f0000000040)=""/254) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:23 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 432.878022] input: syz1 as /devices/virtual/input/input335 04:36:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x12, 0x0, 0x0, 0x6}, 0x0, 0x40000, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x3]}, 0x45c) 04:36:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x114, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:24 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'batadv_slave_1\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20080, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x400000, {{0xa, 0x4e21, 0x3, @local, 0x8}}}, 0x88) close(r0) 04:36:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0xcd, 0x20, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfff}, 0x20004, 0x0, 0x4002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x402000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x80, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) fcntl$notify(r3, 0x402, 0x80000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 433.208984] input: syz1 as /devices/virtual/input/input336 04:36:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 433.321502] input: syz1 as /devices/virtual/input/input337 04:36:24 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000004200)='/dev/null\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) recvmmsg(r2, &(0x7f0000005480)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/93, 0x5d}], 0x1, &(0x7f0000000200)=""/125, 0x7d}, 0x50}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1, &(0x7f0000000340)=""/55, 0x37}, 0x4}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/42, 0x2a}], 0x1, &(0x7f0000000480)=""/52, 0x34}, 0xffff}, {{&(0x7f00000004c0)=@pptp, 0x80, &(0x7f0000001640)=[{&(0x7f0000005740)=""/4100, 0x1004}, {&(0x7f0000001540)=""/248, 0xf8}], 0x2, &(0x7f0000001680)=""/13, 0xd}, 0x1000}, {{&(0x7f00000016c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001740)=""/46, 0x2e}, {&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/14, 0xe}, {&(0x7f0000001800)=""/78, 0x4e}, {&(0x7f0000001880)=""/248, 0xf8}, {&(0x7f0000001980)=""/188, 0xbc}, {&(0x7f0000001a40)=""/36, 0x24}, {&(0x7f0000001a80)=""/75, 0x4b}, {&(0x7f0000001b00)=""/34, 0x22}, {&(0x7f0000001b40)=""/195, 0xc3}], 0xa, &(0x7f0000001d00)=""/4096, 0x1000}, 0x400}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d00)=""/141, 0x8d}], 0x1, &(0x7f0000002e00)=""/10, 0xa}, 0x9}, {{&(0x7f0000002e40)=@l2tp, 0x80, &(0x7f0000004040)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/182, 0xb6}, {&(0x7f0000003f80)=""/33, 0x21}, {&(0x7f0000003fc0)=""/65, 0x41}], 0x4, &(0x7f0000004080)=""/233, 0xe9}, 0x6}, {{&(0x7f0000004180)=@rc, 0x80, &(0x7f0000004200)}, 0xfff}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004240)=""/255, 0xff}, {&(0x7f0000004340)}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x3, &(0x7f00000053c0)=""/181, 0xb5}, 0x1}], 0x9, 0x20, &(0x7f00000056c0)={0x0, 0x1c9c380}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000580)=0x7fffffff) sendfile(r2, r3, &(0x7f0000005700)=0x2, 0x20) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0x80000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x400a00) close(r1) 04:36:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x4]}, 0x45c) 04:36:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000000c0)=0x8, 0x7fff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}}) [ 433.608431] input: syz1 as /devices/virtual/input/input338 04:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x2b, 0x4, 0x1f, &(0x7f0000000700)) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x3}) close(r1) 04:36:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000480)=0x1a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6560000000b7f06197151340010003a4b4950000000000000000f312481c7ae76ff6e769d61e323df67e4a9529132d3467dcd1fbad35d0bb8dd553447a88c20dbaefb1ff85a19c44788cdc5be9de445ff6073d07d65b11f1ee3cc02c6363c4ed83f95eb833e22b92f28614db3604ece593fc74f77065bd25beda191979339095567fab990f27dbba0a2bcc26fb076f8676a20ec5cbff35f315689ebd2249907ac6a8f66aebc22f7a18bd34ff1ecdc20ae29724c0d8c72a55e1f4c675ea3477a2ffe0e85f63fe51b5f5c1cc857b372afb6e50f543820d59f7b0d56589552074eaa367398ec465b88a6eae933fd3ff6aaa5ea8529fb8172099257cb164ee61de08fd18fcbd1b4e706d6ac08cfa92a4563cb8f0a948e6a3e103c01bbb0bf1fbf302ddcf5140a76a9d3e56e2f4bc95d17f"], 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r10}, {}, 0x7f2b15d7, 0x3}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x9, 0x6, {r10}, {r13}, 0x4, 0x719}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x2ffff, 0xf51, {r11}, {r14}, 0x7, 0x1}) [ 433.716091] input: syz1 as /devices/virtual/input/input339 04:36:24 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @rose}, [@null, @bcast, @remote, @netrom, @netrom, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0xc806) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) close(r0) 04:36:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x5]}, 0x45c) 04:36:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 433.992209] input: syz1 as /devices/virtual/input/input340 [ 434.040432] input: syz1 as /devices/virtual/input/input341 04:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x11]}, 0x45c) 04:36:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x420000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xe8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000480)=0x1a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r10}, {}, 0x7f2b15d7, 0x3}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x9, 0x6, {r10}, {r13}, 0x4, 0x719}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x2ffff, 0xf51, {r11}, {r14}, 0x7, 0x1}) 04:36:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x100) [ 434.252795] input: syz1 as /devices/virtual/input/input342 04:36:25 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10}, {0xe, 0x2}, {0x10, 0xfff2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 434.385239] input: syz1 as /devices/virtual/input/input343 04:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x12]}, 0x45c) [ 434.532337] device batadv0 entered promiscuous mode 04:36:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:25 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000040)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r12, r11, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0xc62f, 0x2, 0x7, 0x0, 0x0, [{{r3}}, {{r5}, 0x80}, {{r1}, 0x5}, {{r6}, 0x7}, {{r8}, 0x101}, {{r10}, 0x3}, {{r12}}]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') fadvise64(r2, 0x40, 0x1, 0x5) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r14, r13, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000002d00)={0xf000000, 0x1, 0xd8e6, r14, 0x0, &(0x7f0000002cc0)={0x9b0942, 0xc00000, [], @value64}}) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="d56a0f0000000000002e07"], 0x3}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r15, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000df251c6a96", @ANYRES16=r16, @ANYBLOB="080028bd7000fedbdf25060000001c00038008000200ff030000080002000100000008000300ffff00003400068008000100020000000800010061f5000004000200040002000800010007000000080001005b00000008000100080000006c0005801c00028008000100130000000800040002000000080001000700000034000280080004008d4d000008000200ff0f000008000100060000000800020000000000080003007fea000008000100040000000c00028008000200020000000c0002800800040085000000"], 0xd0}, 0x1, 0x0, 0x0, 0x840}, 0x40004) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/62, 0x3e) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 434.559646] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 434.597867] input: syz1 as /devices/virtual/input/input344 [ 434.629485] device batadv0 left promiscuous mode 04:36:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioprio_get$pid(0x1, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 434.673141] input: syz1 as /devices/virtual/input/input345 04:36:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000480)=0x1a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r10}, {}, 0x7f2b15d7, 0x3}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x9, 0x6, {r10}, {r13}, 0x4, 0x719}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x2ffff, 0xf51, {r11}, {r14}, 0x7, 0x1}) 04:36:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x14]}, 0x45c) 04:36:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x8, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:25 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x20, 0x3ce3d033}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000040)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r8, r7, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r12, r11, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0xc62f, 0x2, 0x7, 0x0, 0x0, [{{r3}}, {{r5}, 0x80}, {{r1}, 0x5}, {{r6}, 0x7}, {{r8}, 0x101}, {{r10}, 0x3}, {{r12}}]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') fadvise64(r2, 0x40, 0x1, 0x5) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r14, r13, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000002d00)={0xf000000, 0x1, 0xd8e6, r14, 0x0, &(0x7f0000002cc0)={0x9b0942, 0xc00000, [], @value64}}) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="d56a0f0000000000002e07"], 0x3}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r15, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000df251c6a96", @ANYRES16=r16, @ANYBLOB="080028bd7000fedbdf25060000001c00038008000200ff030000080002000100000008000300ffff00003400068008000100020000000800010061f5000004000200040002000800010007000000080001005b00000008000100080000006c0005801c00028008000100130000000800040002000000080001000700000034000280080004008d4d000008000200ff0f000008000100060000000800020000000000080003007fea000008000100040000000c00028008000200020000000c0002800800040085000000"], 0xd0}, 0x1, 0x0, 0x0, 0x840}, 0x40004) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.impure\x00', &(0x7f0000000240)=""/62, 0x3e) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.006481] input: syz1 as /devices/virtual/input/input346 04:36:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x42, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x7, &(0x7f0000000200)=[{}, {}, {}, {@none}, {@none}, {@none}, {}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) set_tid_address(&(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.090862] input: syz1 as /devices/virtual/input/input347 04:36:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x15]}, 0x45c) 04:36:26 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x2, 0x0, 0x1}, &(0x7f0000000040)=[{}]) close(r0) 04:36:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB="b200000064a8899f9161f08c3e192f120d3b47aae903b6f537b316573b0f5feca1778bd43d27d5e0952a05671f1b23289778ecb0d98f88eb529032bfbbdf01f234297df1fa7aa9fbf40b30ae3602733da8dd17bf587f8a4b47dfed2b0d43a949bbf268380e1d34c89483af4e0033aad91ecdc323f421b1bf12ebb18feda2536ebe8739696a876fd43ce648c6ee47ff4dee9cb3d265e6c3b9965af21cd00470223895bb081cee4a46f401bb9c1037998b7dcc0aa8ddaf"]) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0xf87d, 0x1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000280)=0x2, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x4, 0x1]}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 04:36:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x104, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000480)=0x1a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6560000000b7f06197151340010003a4b4950000000000000000f312481c7ae76ff6e769d61e323df67e4a9529132d3467dcd1fbad35d0bb8dd553447a88c20dbaefb1ff85a19c44788cdc5be9de445ff6073d07d65b11f1ee3cc02c6363c4ed83f95eb833e22b92f28614db3604ece593fc74f77065bd25beda191979339095567fab990f27dbba0a2bcc26fb076f8676a20ec5cbff35f315689ebd2249907ac6a8f66aebc22f7a18bd34ff1ecdc20ae29724c0d8c72a55e1f4c675ea3477a2ffe0e85f63fe51b5f5c1cc857b372afb6e50f543820d59f7b0d56589552074eaa367398ec465b88a6eae933fd3ff6aaa5ea8529fb8172099257cb164ee61de08fd18fcbd1b4e706d6ac08cfa92a4563cb8f0a948e6a3e103c01bbb0bf1fbf302ddcf5140a76a9d3e56e2f4bc95d17f"], 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r5) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r10}, {}, 0x7f2b15d7, 0x3}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r13) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x9, 0x6, {r10}, {r13}, 0x4, 0x719}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x2ffff, 0xf51, {r11}, {r14}, 0x7, 0x1}) 04:36:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 435.350216] input: syz1 as /devices/virtual/input/input348 04:36:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x16]}, 0x45c) 04:36:26 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, 0x0, 0x0) close(r0) 04:36:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = dup3(0xffffffffffffffff, r1, 0x0) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/227, 0xe3, 0x57, 0xfffffffd, 0x5, 0x6, 0x9}}, 0x120) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) statx(r2, &(0x7f0000000340)='./file0\x00', 0x0, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) write$FUSE_ATTR(r3, &(0x7f0000000540)={0x78, 0x0, 0x5, {0x2, 0x401, 0x0, {0x2, 0x4, 0x0, 0x100, 0x80, 0x1f, 0x4, 0x8e2, 0x200, 0x9, 0x4, r5, r6, 0x8, 0x20}}}, 0x78) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) dup3(r8, r7, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0xc000000000000000, 0x480000000000}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.602145] input: syz1 as /devices/virtual/input/input350 04:36:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x104, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x300]}, 0x45c) 04:36:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @local}}, 0x8001, 0x3ff, 0x3, 0x4a62, 0x20, 0x6, 0x8}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1, 0x4, 0xaf, 0x4, 0xa5, 0x42708136, 0x3}, &(0x7f0000000280)=0x9c) dup3(r3, r2, 0x0) r5 = accept4$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000680)=[0x4, 0x3], 0x2) dup3(r7, r6, 0x0) poll(&(0x7f0000000440)=[{r3, 0x2}, {r5, 0xa181}, {r6}, {0xffffffffffffffff, 0x488}], 0x4, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000020603000000000000deffffffffff080d000300686173683a6d6163000000000900020073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1001) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="02000041dca4efa733a157068862c2ca00", @ANYRES16=r11, @ANYBLOB="20002cbd7000fbdbdf250700000014000980080002000180000008000100223800001800028014000380080001000800000008000100ff00000018000780ffffff7f00800000000000000800020009000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7ff}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.826978] input: syz1 as /devices/virtual/input/input352 04:36:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "f0fd9bee0bfbe13e3fd62bc800137292"}, 0x11) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 04:36:26 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10d40, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000300)={{0x0, 0x0, 0x80}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x1000}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) close(r1) [ 435.876793] input: syz1 as /devices/virtual/input/input353 04:36:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x500]}, 0x45c) 04:36:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x104, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0xffff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0xe2, 0x8004, 0x800, 0x80, r1}}, @authinfo={0x18, 0x84, 0x6, {0xeef7}}, @init={0x18, 0x84, 0x0, {0xff, 0x1, 0xffbf, 0x5375}}], 0x50, 0x880}, 0x24000014) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x4, 0x45, 0x7f, 0x7, 0x0, 0x8000, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x1, 0x8000}, 0x4000, 0x1, 0x6, 0x5, 0x8, 0xfffffff8}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x81, 0x14, 0x43d, 0x59e, "dcb32464fd5af55bcd5741f648aa3ae1d33684200df635f98f90c994c3accec8"}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_submit(r8, 0x3, &(0x7f00000016c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xff, r10, &(0x7f0000000480)="9a278cb7d792f685d78ea41193be2be189491db89e4cc7029641d1e03edda10cecb66d458fbeaa4cabdaef37bfff136ffb18705a06e1bc8f44f2b5fc4028f56732c15d9a2b38d0effc580ddde0dfdd4c103e071a15fd68d4db529a2b89eb4f9fca82d995c7049b8ac1de61a08e84abe99541c8acac446414547273e3a649fd8834027437198a18ba242064b08905eec8a365b44ed74e5e5ac03defcd34f23224baa68527f5fb30634a06dfd9569189438ac48ceb21f1c0ecb2cfecab5af87441cde44ea54a0895c419424a6c20955ea17c64c766445f4ec7a738dc12892023aeddd3dfa894c6ab5461ed06048aefd1d2ec571ceca3269f", 0xf7, 0x8, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000005c0)="4aa79e5621b4d2029005aeeacee6bd3735563c1beac6b769a95517ca75e635dfd39d44415eee3ca3cf04a9e007573f6bf45aa8632d54b88e6d78ecf9ebcd452000296ae289b4ae01241e3d6094fe0f162f4f3adbd2f3fd4cc0b216ac12d8be4c1fb74e909b9624410e0dd25b83921dcbf54c900fab63bd2c8a5b1faf68869efe5f9ff7e84b1a4b2c0ec6de792ff83455507018239ae272feb104ca22c7f4581ac6a84f861940838f95ac6c36800a684c373d1e18d2c77d6cad48b9e98446cf28bb8a324307049c21d8c84e3f90382987bdc1822b916ea3beb3abed2394eafd6b503645fc5f197ac0c34d0a85fe0da8752b8494d6e170aae01e5d83d943575ac09cbff4a46cad0d83e9923d3d571149ac9625206f3375e3aa7f8980669df4a057f8c870de44c17c9d329c044196f851d8bd6734d9885bc16002839415ac528a603f429b9c8fedd651b82d46e3941359fdf89220f0ba1859bf94e24a1eeadd1bc7b47c173c7214c4dd8a9d542399c94503dcde629a3c75865b000d2141579b0378d2d7081f539d19ba6cb25186e229e4392a976fe7e4a327280deea32a8a6dff4f6b4dd9ecffed7c9e889c5369ec49ceeee2cb44d947f7a1231e195755cbc1d214f87ba2326c443a6112f645411d87bb064246a3ec6828684caaddb616e3f5ed785f0b20dceccf5e70f3a5de11de3b7025604b67a94666f8541754d64e0fc29a94971c448088b15c563a17d1c4a627a5000aa554b8beaef77aa37ef0deb9bcd9aff0f574e8176b52f5349fac2e4471d448ebbe73c53f31c88028226ed72eee153d7ce3077796f98cbc78c0344f03f07a6b282e7e50fd4ea0fe0fde685d971f0aa3a596e941a48c1ae9c543cd1905a715501ef1970103297d6e33a268c90acea818a1201fc08978185560aaee28999607f7d27a3a35740c2c863358ac3d53284ae462947af99c93a54c474a4e37299a842f9ea529acdffc393d509f496641ab96eea6305cdf706c38b031f175dae8e88dc760898b4d962a70c5bc32a6aec8bc861aa63a2fef06b35577138957e60e174a3de8782fbabf5ecd1074bdc7a606365537ceb0d280e9caf58d00838a5758770ed1d1b5341647061d0a9ef401560a7550618a3de85cbd5acfd042f1be8117e344967173210557ba2a05a121c3411941dd247f31bbd3debaf28bcd33a76ce5d76340c110bae8e840d9aa19fb9977a65eb0162a1cd2eafd0ad18a914c1bc06ee0cca0c9c5061cb78837997346aa6b0ea5fe0d198fcfdbc37fc7af0b37e4ffc25ba66680d6faa81b4ad91bd8f4bf9a7b23f7473a6d17c9224a5ee4b4793b4150ad25427783843411f5533a2f92693815446238abb6e29bc0a3dac4daa4c3e22f86af73cc08cb9855f6c839bd5232cc76ec60609f69a8dfebafe5dd780db888d8acf5b0b2162214932edc6265b6b4e1540e66b68bc2642ea73bfd56acc827b4efd4253802128a19778bee14a757d955192a8c074c73e8a15b82673001e4351eddc67c93a82e29518426a77aadf908a176055ba4a191500dd4b52b1dab8032a17c8a673e70e6da0139d60e09e0a481b62e7f6bfb5c0690439a459714c2eac0409f4c5ebbbb7fd49199f5857509822bd47c4890bd953eae1e88097e6b391f75eedde3eee9cc8d540e0d8c00efd1790f12edd7992249884e90a1a80652db0d43c38af58e1f75b9bd1417c3496dc21cd6d3615a51cad960c429c12bdf187dfdac6edf2a95812943b7e5c53d120d67436ecdb0d89f5094ebc854116d4c28e3ab7bcb637de432dbd99e1ceb17361835244b0cb0239158452c0fbea7387b24acb3eedd7cd83e055bb56e442be0784df5f52e686086c3cb685ff2fa86b03c1f051c31c23ea6f2ec90d7c17ecccc472462a892fddb63e023cdd71e3004da9dba0405e016b9c143441dd14c0f6ca2c59fdb732639d8d2c135ee4366c4cc2f640f8d6afbd92e3d503db0911cd849b74f3508c341cbb5f0ade9f8a4db92eb69c5c867c80343b8c1de0230b64305d9b20f1f8cfc618e30ba076e1a886033c90018ce2278e5f4ea51175a32047136d17b53204e7585e9213b0cb93c48a4bb1fe94ddabadedc45b32dfa1b90df7c7cb1f8c5525e2768bb14de38ae10f91e7b658cec1d454b423029563e20278e94e49fea88251ca246f6ef5bc51fa0f2a2c16749fcea9171669bbad66608dbc96021b4fa73abb615ec0321de11e9bb3d502ee806a553f1b8d75def0ff98fd333f747f14ee9f97138e9a7ae9e07915539b6ac2db1a9bf321b306aaad1149239f0ecb15fe03d0370b8e734251f77ce068100f34b69f872670328160efd0ac448785dde50ba430b6666c01404ba449db19832775bb1e851193ee21f913283561822f560b892e473c16f6979481366809481c418bb04d0baa0bf9edd1897f97854f58a9909d709f872a32f1373554c7461c3470b7b688f150b0eb5253580f6c83811d93eb1a45e575de5b2598d44ea90593efd04862f64fe72d315469e03c7053b64072c07657bbd96545e2f07c27888a8751e368da63c64325f65d0ec7e7a3bd85e07ba84b1b7be076844c7f60ba13f68a0f3214c9413f0a86384cb2eb65f3b2d7323166bfa130c965f8687368f608d7b9c8709b53d76cca5ed044d2592d1e26bf455a2c463c9dfe47d28e18e3b2959be49af93eadb05e9b75e95630d6324d28374c52cd4c3b6ee67966b889cd1c973233b73e38e8cd949289828febbf7a7d5747216fe43a2d54bf9ab3cbd827255512d3652fa3a554ce879a186223a8b588352e09130ba80a3ac2ec6f877b0dacde7bcbbba56c86de696626e7d5e51c492fc057d9c91c3cb9d97d84cda6b15e369ee6d13a3c5a7776cc61f60296b1b6c461b479d44d6b7954ff1fbd3624501a571e28d9c98d12c1f339e367b4948801f1dab8c1aabf0b1e0c68bdab749870cf937b6847c1926a3d28c719de3adf8f4f127321fe51ca51a12e67218101e98a967656f344cee88a358175957d98fafde74af871c0f8126f33e62936eebe4f4a8ebb171d40eb6bdecc04e5a504a18e3b8f44405221f6a638e5d86bcffa362b7411e4ddf10d4a3ad327a17a8a73ff45b9796609ca61b82643277864b821240d79dc289fd0e2b1f44afed6207672a16e68e96058f4219e7b2db7759bda160d6ac42b15a5e0552d4dc99b3f30baf56dc0674bb9e1660199a0a100c794dfd228381189661439538f5f742ab1cb7d5ba6b6b9e9939811163735b588cea2e3589d9717f81edda9d0bb6ffda8850efb099b17bddfa1ec6d81736a1a83518a541668fbd9dcd937e6fd425275840f6d1998fdc7f0702c270c85ebacacb022ae9574f3c3b3cdf8181701ceaa2d57e1058462d57bc9c716ca1d43c78f6ed1e16adaeb609977157fd58fc3a460ecc30a295f3d4bcd07223268acfdcc83b6ea37f55c395120fef5934aca51641b7f8a24e2e1f846f906ea1597a5234eb0ea74686ad072dc72aeaf724db392e2438a2a9442c39875f666a6ea5f4f164cee3a779cc4684900ba522b8efc4d8f1add18de061111c36c4e30f6784ded3cb7ea8a050a25ba21bdf79d83e2ec151d3fc2897ea56a1e626213e79c06bd6b6ac37399a18f615631178eeddf3eb67b7645daeb1a57464d0bbac14fdd7053fbb2e3c71807e347eb6a9106155aae1da81936dff0f8fcc7a14bec4e08130c999fc0c65e8f2f6d8ce1d73fbf26371f130836b23624238c8494980bb58a783fbc91eb5f3a23824700b2ca87358620d54fa3d6c0da41620bd4d28f7fe89b68f028972a82bf7ef93bb7d4c3c5bc8caaadaaa06e9026c0dfa151c38708d0700168c5391c2bb5bc9de14663f3d1d19f7d3108dc641bc8e67bf9fde8697dca59f9a7e40ebba551876053cb2181d7b08511cdf7a02a821baa4f6d41d919d73c49a66be12e342553c2f149c61b57eee05025d4795b37678b122b7f8499a9676760f38dad5ddd4372fa01e36d9b426fdbe0102bd7a02d5f0e626fc1f5e3f7af80784e2822d819f1639260a6316c4a767eec558360a918f0bd524738ae3d592b0851df3c041f31b9d7e0b89ddca9d9740dd76e2745fd1f103a8940eadae8989df998b9cf20293f7c67cee2c66fed223f23ada955e98d4d4b4ce2a881421a5dd23505281d42c11730eb5da2ec6feb3b8b49c57490d725e98cf8338e564550c29bc63cb8d1aa208c1b4ce6e38e36d6c75accae68297fc707c6590dada375a9396fab98a6474e5c93f37a9ad7d6c4d948f2e4efc9cf27b7b31c92248199a3087d4eeee2c78a6af56cbe3905e234b97b3a3ac621ece12642925f94dde7d42bce5240f5ca75bd899c99e8520f7a965007662c0616e33141404010cdad8e44a6f60138d672ca7f7afded0b99860f343a4ee4b1f1ac074a75a1f2e71a41a871c7f4c888a77564a360ad51038ab26c6ce2cffb40b89c34bb51215f0443569622bc3f0bed6b99de2b92b0b082b9dc08b2411bf0277bd8d7704aa66f1a67721639137ba7f37ef11dfd419c61045344c5e07cacbb53f79fa345b55bf7f721e45a7a9dabd779836cd20e2097ec481c17a10b482c9081b1fd4bdbd9e0d2c24f60637812cee27ce534ee14bb6b2631e9db54be5630307ee5cc7de5eb252d7e44eca6aca95449219e4ddff256523a629b9b50496e76ce29db8980622ad995937f18a7440840740aaad78aa21a427e481c32bf2e481f9023d0730b8e99fdb852cecdf9787ec9853075ffbed7300cf591983df1596628ddb1cde830c21fa57008a5d8e3411d4426110b9807e878a9d746aa1b8b6e9d1fe3b8e8cd59de0e9804ec25b631f1069c2752b1bc19e2192e64d1fe4539f3bdfe9ed7dd8bc5a5cbb00fbef529ae0e9648bb709fca010a5854a7d2bcc82847955de216efd4848ea66a9d2e66aa7d642dc5d7b3a5c6cbb764f715dfe7ea722714771fe540f194180b4fb826c15d028be3d0ba8a2a7bcc7c05195d4a813236d355450e062a8e9ac7a208b66314826c96c8a41275741dd9b0b7026608dbf7c90697d4df92f712eea7284fdf22a619e1a5aa31029466946b2a92b6e4d27a6296ee1acfab30b912f10a792208c745b9d634d7718f3bbc76ca59db3de132fda694ce41b7cc6a104fbed69ee32987c629c7a451e377bca48562abc77c53a90e980dacbc478eec32e8893e2b0af97c1491efb72cef50d9835e8ad36a988066fba05c91f86cb83d69a4ed6b22594f327f8c89e0f9bf27755a97fb30a3b8bb9944f45dd85d7b0abd2c971476bc4b4bb2145549e04c6de6999c4477e52c077e27e0d31760342916804fea822ce8b40b59367e1d2e5610648b8f2f1d26c8bbd261f2da0f4397e3f83652f1ec07126433b4cc976b4a5efd387d07487bdc64131d09a7ea72d93374080a0527539f0cbf0997fd266266b27f5e630fc9211f4f1487eb4a471529c23ab2c481a260350b65793442eddab9bcfd4c80759737bc659f53f2a2aa782c7507e065082a6ca57ef8ac261f94434e229ae96ab7f0421538c955b5132673361b201d434624e79d755d0fc2c1b5dc05ed304239c3cd8aa380995305aed3b027c6cd03315c8eed24c122fb5f24f518cb6b7dad2e3d287c2d7817fae76060d5f009c770f56d9b5a0ad613c1616228356b2c738c0645347f8d108381f5ddafc3d7002026df66e612868d30e393de22c41dfc5b7bd84c69ccab4b4d8609ae7061db2cf4f8320744c4e8d6d87ac78b90d8959c4364980063fc346bca46e08ce4ef00a8311418418bc72237013183b4254ea0af0b37bdd0d0deb896229ee1827f5d86ddc254af5493d12c5f0", 0x1000, 0x8, 0x0, 0x1, r11}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x1, r12, &(0x7f0000001640)="1db23b7d501781dd8aaeb22f23dd07da6a76a6507fbfbdf04cc1d672db473e7a15f8a446a2f8a255893f6d5987", 0x2d, 0x107c, 0x0, 0x2, r2}]) dup3(r6, r5, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="525be700009a9beb5de00774237202e39bd2d79502ae7db15c44e0a80a7f3ceb924b6e62d97c8050a7a8f3740669394fb277f8d1b3b9fbdc4fd8581e9064e078f54d926516231f774083bdd03fa1f692c6ea3c5bd36aa5b60dbc55cca36f7fbd69a39eddc9d9827ab589da91c6ff", @ANYRES16=r13, @ANYBLOB="080025bd7000fbdbdf250c000000340006800800010009000000080001000700000008000100fbffffff08000100000000000400021b7f68e50008ff070000"], 0x48}}, 0x4000010) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 436.130596] input: syz1 as /devices/virtual/input/input354 04:36:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:27 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x10a00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40000, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vcan0\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 436.222629] input: syz1 as /devices/virtual/input/input355 04:36:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1100]}, 0x45c) 04:36:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2a0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x6, 0x2, 0x1, 0x8}, {0x23ec, 0x25, 0xa4, 0x1}, {0x6, 0x1, 0x7f, 0xfffffffa}, {0xefd, 0x80, 0x6, 0x2}, {0x80, 0x75, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6f7, 0x81, 0x7f, 0xd196}, {0x1, 0x1, 0x1, 0xfffffe00}, {0x3, 0x9, 0x3f, 0xcb0}, {0x6, 0x7f, 0xbf, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r15 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r15, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r14, @ANYBLOB="050006000000000008000200", @ANYRES32=r16, @ANYBLOB="ee52793e9d4455c74c519914ed82654d2368abdf458d26463638607d0536dc93d8c0b9df262a23b494cdd26b874b4a3534433e07cae8a07983c9a0e9d9ee88522aba09"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r21 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r21, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r21, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r20}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r22}]}}}]}, 0x48}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r23, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r25 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r25, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r24, @ANYBLOB="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"/509, @ANYRES32=r26, @ANYBLOB], 0x48}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@can={0x1d, 0x0}, &(0x7f0000000740)=0x80) r28 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r28, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r29 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r29, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0xffffffffffffff58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c}}}]}, 0x48}}, 0x4008000) r31 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r32 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r32, r31, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r33, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r35 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r35, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r33, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r34}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r36}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r31, 0x8933, &(0x7f00000007c0)={'wg2\x00', r36}) r38 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r39 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r39, r38, 0x0) getsockopt$inet_mreqn(r38, 0x0, 0x24, &(0x7f00000009c0)={@dev, @initdev, 0x0}, &(0x7f0000000a00)=0xc) r41 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r42 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r42, r41, 0x0) getsockopt$PNPIPE_IFINDEX(r41, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000b00)={0x4ec, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x2a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xff, 0x94, 0x9, 0x7}]}}}, {0xfffffffffffffe1d, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xbcf1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r43}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 04:36:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 436.426421] input: syz1 as /devices/virtual/input/input356 [ 436.476589] input: syz1 as /devices/virtual/input/input357 04:36:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:27 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b000000700008000800000000000800090000000000080001000a0000000800050002000003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r4, 0x621, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000095) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x4, 0x9, 0x4, 0x2040, 0xfffffffc, {r8, r9/1000+10000}, {0x4, 0x1, 0xce, 0x1f, 0x17, 0xc1, "afa2140c"}, 0x7, 0x1, @fd, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, &(0x7f00000000c0)=0x3, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r7) 04:36:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1200]}, 0x45c) 04:36:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00085e11b5bbcc512d191e70b32a8052b3026d1a04af93da00028028000100", @ANYRES32=r7, @ANYBLOB="050006000000000008000200", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@local, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x21, r9, 0xee00}, {0x3, 0x100000001, 0x1, 0x63, 0x8, 0x9, 0x1, 0x4}, {0xfff, 0x100, 0x8, 0x6}, 0x6, 0x6e6bc0, 0x2, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d3, 0xc3}, 0x2, @in=@multicast2, 0x3503, 0x0, 0x0, 0x4, 0x0, 0x20}}, 0xe8) dup3(r3, r2, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x180, 0x3450, 0x5, 0x5, 0x8, 0x19, 0x2}, r2, 0x10, 0xffffffffffffffff, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 436.654990] device batadv0 entered promiscuous mode [ 436.666979] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 04:36:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1400]}, 0x45c) [ 436.719958] input: syz1 as /devices/virtual/input/input358 [ 436.740578] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 436.801906] device batadv0 left promiscuous mode [ 436.819027] input: syz1 as /devices/virtual/input/input360 [ 436.871091] input: syz1 as /devices/virtual/input/input361 [ 436.892690] device batadv0 entered promiscuous mode 04:36:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1500]}, 0x45c) [ 436.940701] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 436.979605] device batadv0 left promiscuous mode [ 437.005415] input: syz1 as /devices/virtual/input/input362 04:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1600]}, 0x45c) [ 437.054668] input: syz1 as /devices/virtual/input/input363 [ 437.071876] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.122534] device batadv0 entered promiscuous mode [ 437.149804] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 437.175736] input: syz1 as /devices/virtual/input/input364 [ 437.199678] device batadv0 left promiscuous mode [ 437.241526] input: syz1 as /devices/virtual/input/input365 04:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1f00]}, 0x45c) [ 437.293990] device batadv0 entered promiscuous mode [ 437.340300] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 437.343721] input: syz1 as /devices/virtual/input/input366 [ 437.399107] device batadv0 left promiscuous mode [ 437.421904] input: syz1 as /devices/virtual/input/input367 [ 437.449185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 437.457806] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 04:36:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1000000]}, 0x45c) [ 437.464001] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 437.522362] device batadv0 entered promiscuous mode [ 437.549766] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 437.555341] input: syz1 as /devices/virtual/input/input368 [ 437.589444] device batadv0 left promiscuous mode 04:36:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0xffff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0xe2, 0x8004, 0x800, 0x80, r1}}, @authinfo={0x18, 0x84, 0x6, {0xeef7}}, @init={0x18, 0x84, 0x0, {0xff, 0x1, 0xffbf, 0x5375}}], 0x50, 0x880}, 0x24000014) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x4, 0x45, 0x7f, 0x7, 0x0, 0x8000, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x1, 0x8000}, 0x4000, 0x1, 0x6, 0x5, 0x8, 0xfffffff8}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x81, 0x14, 0x43d, 0x59e, "dcb32464fd5af55bcd5741f648aa3ae1d33684200df635f98f90c994c3accec8"}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_submit(r8, 0x3, &(0x7f00000016c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xff, r10, &(0x7f0000000480)="9a278cb7d792f685d78ea41193be2be189491db89e4cc7029641d1e03edda10cecb66d458fbeaa4cabdaef37bfff136ffb18705a06e1bc8f44f2b5fc4028f56732c15d9a2b38d0effc580ddde0dfdd4c103e071a15fd68d4db529a2b89eb4f9fca82d995c7049b8ac1de61a08e84abe99541c8acac446414547273e3a649fd8834027437198a18ba242064b08905eec8a365b44ed74e5e5ac03defcd34f23224baa68527f5fb30634a06dfd9569189438ac48ceb21f1c0ecb2cfecab5af87441cde44ea54a0895c419424a6c20955ea17c64c766445f4ec7a738dc12892023aeddd3dfa894c6ab5461ed06048aefd1d2ec571ceca3269f", 0xf7, 0x8, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000005c0)="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", 0x1000, 0x8, 0x0, 0x1, r11}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x1, r12, &(0x7f0000001640)="1db23b7d501781dd8aaeb22f23dd07da6a76a6507fbfbdf04cc1d672db473e7a15f8a446a2f8a255893f6d5987", 0x2d, 0x107c, 0x0, 0x2, r2}]) dup3(r6, r5, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="525be700009a9beb5de00774237202e39bd2d79502ae7db15c44e0a80a7f3ceb924b6e62d97c8050a7a8f3740669394fb277f8d1b3b9fbdc4fd8581e9064e078f54d926516231f774083bdd03fa1f692c6ea3c5bd36aa5b60dbc55cca36f7fbd69a39eddc9d9827ab589da91c6ff", @ANYRES16=r13, @ANYBLOB="080025bd7000fbdbdf250c000000340006800800010009000000080001000700000008000100fbffffff08000100000000000400021b7f68e50008ff070000"], 0x48}}, 0x4000010) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 437.622942] input: syz1 as /devices/virtual/input/input369 [ 437.635209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 04:36:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) 04:36:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x2000000]}, 0x45c) 04:36:28 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc00) close(r0) 04:36:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x131000, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0x8}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x50988f452a0f7805, 0x20, 0x5, r2, 0x0, &(0x7f0000000100)={0x9909da, 0x10001, [], @ptr=0x40000000}}) r6 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x1, 0x101000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@null, @bcast, @netrom, @default, @remote, @bcast, @rose, @rose]}, &(0x7f0000000280)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x7fffffff}, r0, 0xc, 0xffffffffffffffff, 0x8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 437.869412] input: syz1 as /devices/virtual/input/input370 04:36:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x3000000]}, 0x45c) 04:36:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) [ 438.078598] input: syz1 as /devices/virtual/input/input372 04:36:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0xffff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0xe2, 0x8004, 0x800, 0x80, r1}}, @authinfo={0x18, 0x84, 0x6, {0xeef7}}, @init={0x18, 0x84, 0x0, {0xff, 0x1, 0xffbf, 0x5375}}], 0x50, 0x880}, 0x24000014) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x4, 0x45, 0x7f, 0x7, 0x0, 0x8000, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x1, 0x8000}, 0x4000, 0x1, 0x6, 0x5, 0x8, 0xfffffff8}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x81, 0x14, 0x43d, 0x59e, "dcb32464fd5af55bcd5741f648aa3ae1d33684200df635f98f90c994c3accec8"}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_submit(r8, 0x3, &(0x7f00000016c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xff, r10, &(0x7f0000000480)="9a278cb7d792f685d78ea41193be2be189491db89e4cc7029641d1e03edda10cecb66d458fbeaa4cabdaef37bfff136ffb18705a06e1bc8f44f2b5fc4028f56732c15d9a2b38d0effc580ddde0dfdd4c103e071a15fd68d4db529a2b89eb4f9fca82d995c7049b8ac1de61a08e84abe99541c8acac446414547273e3a649fd8834027437198a18ba242064b08905eec8a365b44ed74e5e5ac03defcd34f23224baa68527f5fb30634a06dfd9569189438ac48ceb21f1c0ecb2cfecab5af87441cde44ea54a0895c419424a6c20955ea17c64c766445f4ec7a738dc12892023aeddd3dfa894c6ab5461ed06048aefd1d2ec571ceca3269f", 0xf7, 0x8, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000005c0)="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", 0x1000, 0x8, 0x0, 0x1, r11}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x1, r12, &(0x7f0000001640)="1db23b7d501781dd8aaeb22f23dd07da6a76a6507fbfbdf04cc1d672db473e7a15f8a446a2f8a255893f6d5987", 0x2d, 0x107c, 0x0, 0x2, r2}]) dup3(r6, r5, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="525be700009a9beb5de00774237202e39bd2d79502ae7db15c44e0a80a7f3ceb924b6e62d97c8050a7a8f3740669394fb277f8d1b3b9fbdc4fd8581e9064e078f54d926516231f774083bdd03fa1f692c6ea3c5bd36aa5b60dbc55cca36f7fbd69a39eddc9d9827ab589da91c6ff", @ANYRES16=r13, @ANYBLOB="080025bd7000fbdbdf250c000000340006800800010009000000080001000700000008000100fbffffff08000100000000000400021b7f68e50008ff070000"], 0x48}}, 0x4000010) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x4000000]}, 0x45c) 04:36:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf4, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:29 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x100, 0x9}) [ 438.358077] input: syz1 as /devices/virtual/input/input374 [ 438.441368] input: syz1 as /devices/virtual/input/input375 04:36:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf4, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf4, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x5000000]}, 0x45c) 04:36:29 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) times(&(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0xffff}, &(0x7f0000000300)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0xe2, 0x8004, 0x800, 0x80, r1}}, @authinfo={0x18, 0x84, 0x6, {0xeef7}}, @init={0x18, 0x84, 0x0, {0xff, 0x1, 0xffbf, 0x5375}}], 0x50, 0x880}, 0x24000014) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x70, 0x4, 0x45, 0x7f, 0x7, 0x0, 0x8000, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x1, 0x8000}, 0x4000, 0x1, 0x6, 0x5, 0x8, 0xfffffff8}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x81, 0x14, 0x43d, 0x59e, "dcb32464fd5af55bcd5741f648aa3ae1d33684200df635f98f90c994c3accec8"}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) r11 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_submit(r8, 0x3, &(0x7f00000016c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xff, r10, &(0x7f0000000480)="9a278cb7d792f685d78ea41193be2be189491db89e4cc7029641d1e03edda10cecb66d458fbeaa4cabdaef37bfff136ffb18705a06e1bc8f44f2b5fc4028f56732c15d9a2b38d0effc580ddde0dfdd4c103e071a15fd68d4db529a2b89eb4f9fca82d995c7049b8ac1de61a08e84abe99541c8acac446414547273e3a649fd8834027437198a18ba242064b08905eec8a365b44ed74e5e5ac03defcd34f23224baa68527f5fb30634a06dfd9569189438ac48ceb21f1c0ecb2cfecab5af87441cde44ea54a0895c419424a6c20955ea17c64c766445f4ec7a738dc12892023aeddd3dfa894c6ab5461ed06048aefd1d2ec571ceca3269f", 0xf7, 0x8, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000005c0)="4aa79e5621b4d2029005aeeacee6bd3735563c1beac6b769a95517ca75e635dfd39d44415eee3ca3cf04a9e007573f6bf45aa8632d54b88e6d78ecf9ebcd452000296ae289b4ae01241e3d6094fe0f162f4f3adbd2f3fd4cc0b216ac12d8be4c1fb74e909b9624410e0dd25b83921dcbf54c900fab63bd2c8a5b1faf68869efe5f9ff7e84b1a4b2c0ec6de792ff83455507018239ae272feb104ca22c7f4581ac6a84f861940838f95ac6c36800a684c373d1e18d2c77d6cad48b9e98446cf28bb8a324307049c21d8c84e3f90382987bdc1822b916ea3beb3abed2394eafd6b503645fc5f197ac0c34d0a85fe0da8752b8494d6e170aae01e5d83d943575ac09cbff4a46cad0d83e9923d3d571149ac9625206f3375e3aa7f8980669df4a057f8c870de44c17c9d329c044196f851d8bd6734d9885bc16002839415ac528a603f429b9c8fedd651b82d46e3941359fdf89220f0ba1859bf94e24a1eeadd1bc7b47c173c7214c4dd8a9d542399c94503dcde629a3c75865b000d2141579b0378d2d7081f539d19ba6cb25186e229e4392a976fe7e4a327280deea32a8a6dff4f6b4dd9ecffed7c9e889c5369ec49ceeee2cb44d947f7a1231e195755cbc1d214f87ba2326c443a6112f645411d87bb064246a3ec6828684caaddb616e3f5ed785f0b20dceccf5e70f3a5de11de3b7025604b67a94666f8541754d64e0fc29a94971c448088b15c563a17d1c4a627a5000aa554b8beaef77aa37ef0deb9bcd9aff0f574e8176b52f5349fac2e4471d448ebbe73c53f31c88028226ed72eee153d7ce3077796f98cbc78c0344f03f07a6b282e7e50fd4ea0fe0fde685d971f0aa3a596e941a48c1ae9c543cd1905a715501ef1970103297d6e33a268c90acea818a1201fc08978185560aaee28999607f7d27a3a35740c2c863358ac3d53284ae462947af99c93a54c474a4e37299a842f9ea529acdffc393d509f496641ab96eea6305cdf706c38b031f175dae8e88dc760898b4d962a70c5bc32a6aec8bc861aa63a2fef06b35577138957e60e174a3de8782fbabf5ecd1074bdc7a606365537ceb0d280e9caf58d00838a5758770ed1d1b5341647061d0a9ef401560a7550618a3de85cbd5acfd042f1be8117e344967173210557ba2a05a121c3411941dd247f31bbd3debaf28bcd33a76ce5d76340c110bae8e840d9aa19fb9977a65eb0162a1cd2eafd0ad18a914c1bc06ee0cca0c9c5061cb78837997346aa6b0ea5fe0d198fcfdbc37fc7af0b37e4ffc25ba66680d6faa81b4ad91bd8f4bf9a7b23f7473a6d17c9224a5ee4b4793b4150ad25427783843411f5533a2f92693815446238abb6e29bc0a3dac4daa4c3e22f86af73cc08cb9855f6c839bd5232cc76ec60609f69a8dfebafe5dd780db888d8acf5b0b2162214932edc6265b6b4e1540e66b68bc2642ea73bfd56acc827b4efd4253802128a19778bee14a757d955192a8c074c73e8a15b82673001e4351eddc67c93a82e29518426a77aadf908a176055ba4a191500dd4b52b1dab8032a17c8a673e70e6da0139d60e09e0a481b62e7f6bfb5c0690439a459714c2eac0409f4c5ebbbb7fd49199f5857509822bd47c4890bd953eae1e88097e6b391f75eedde3eee9cc8d540e0d8c00efd1790f12edd7992249884e90a1a80652db0d43c38af58e1f75b9bd1417c3496dc21cd6d3615a51cad960c429c12bdf187dfdac6edf2a95812943b7e5c53d120d67436ecdb0d89f5094ebc854116d4c28e3ab7bcb637de432dbd99e1ceb17361835244b0cb0239158452c0fbea7387b24acb3eedd7cd83e055bb56e442be0784df5f52e686086c3cb685ff2fa86b03c1f051c31c23ea6f2ec90d7c17ecccc472462a892fddb63e023cdd71e3004da9dba0405e016b9c143441dd14c0f6ca2c59fdb732639d8d2c135ee4366c4cc2f640f8d6afbd92e3d503db0911cd849b74f3508c341cbb5f0ade9f8a4db92eb69c5c867c80343b8c1de0230b64305d9b20f1f8cfc618e30ba076e1a886033c90018ce2278e5f4ea51175a32047136d17b53204e7585e9213b0cb93c48a4bb1fe94ddabadedc45b32dfa1b90df7c7cb1f8c5525e2768bb14de38ae10f91e7b658cec1d454b423029563e20278e94e49fea88251ca246f6ef5bc51fa0f2a2c16749fcea9171669bbad66608dbc96021b4fa73abb615ec0321de11e9bb3d502ee806a553f1b8d75def0ff98fd333f747f14ee9f97138e9a7ae9e07915539b6ac2db1a9bf321b306aaad1149239f0ecb15fe03d0370b8e734251f77ce068100f34b69f872670328160efd0ac448785dde50ba430b6666c01404ba449db19832775bb1e851193ee21f913283561822f560b892e473c16f6979481366809481c418bb04d0baa0bf9edd1897f97854f58a9909d709f872a32f1373554c7461c3470b7b688f150b0eb5253580f6c83811d93eb1a45e575de5b2598d44ea90593efd04862f64fe72d315469e03c7053b64072c07657bbd96545e2f07c27888a8751e368da63c64325f65d0ec7e7a3bd85e07ba84b1b7be076844c7f60ba13f68a0f3214c9413f0a86384cb2eb65f3b2d7323166bfa130c965f8687368f608d7b9c8709b53d76cca5ed044d2592d1e26bf455a2c463c9dfe47d28e18e3b2959be49af93eadb05e9b75e95630d6324d28374c52cd4c3b6ee67966b889cd1c973233b73e38e8cd949289828febbf7a7d5747216fe43a2d54bf9ab3cbd827255512d3652fa3a554ce879a186223a8b588352e09130ba80a3ac2ec6f877b0dacde7bcbbba56c86de696626e7d5e51c492fc057d9c91c3cb9d97d84cda6b15e369ee6d13a3c5a7776cc61f60296b1b6c461b479d44d6b7954ff1fbd3624501a571e28d9c98d12c1f339e367b4948801f1dab8c1aabf0b1e0c68bdab749870cf937b6847c1926a3d28c719de3adf8f4f127321fe51ca51a12e67218101e98a967656f344cee88a358175957d98fafde74af871c0f8126f33e62936eebe4f4a8ebb171d40eb6bdecc04e5a504a18e3b8f44405221f6a638e5d86bcffa362b7411e4ddf10d4a3ad327a17a8a73ff45b9796609ca61b82643277864b821240d79dc289fd0e2b1f44afed6207672a16e68e96058f4219e7b2db7759bda160d6ac42b15a5e0552d4dc99b3f30baf56dc0674bb9e1660199a0a100c794dfd228381189661439538f5f742ab1cb7d5ba6b6b9e9939811163735b588cea2e3589d9717f81edda9d0bb6ffda8850efb099b17bddfa1ec6d81736a1a83518a541668fbd9dcd937e6fd425275840f6d1998fdc7f0702c270c85ebacacb022ae9574f3c3b3cdf8181701ceaa2d57e1058462d57bc9c716ca1d43c78f6ed1e16adaeb609977157fd58fc3a460ecc30a295f3d4bcd07223268acfdcc83b6ea37f55c395120fef5934aca51641b7f8a24e2e1f846f906ea1597a5234eb0ea74686ad072dc72aeaf724db392e2438a2a9442c39875f666a6ea5f4f164cee3a779cc4684900ba522b8efc4d8f1add18de061111c36c4e30f6784ded3cb7ea8a050a25ba21bdf79d83e2ec151d3fc2897ea56a1e626213e79c06bd6b6ac37399a18f615631178eeddf3eb67b7645daeb1a57464d0bbac14fdd7053fbb2e3c71807e347eb6a9106155aae1da81936dff0f8fcc7a14bec4e08130c999fc0c65e8f2f6d8ce1d73fbf26371f130836b23624238c8494980bb58a783fbc91eb5f3a23824700b2ca87358620d54fa3d6c0da41620bd4d28f7fe89b68f028972a82bf7ef93bb7d4c3c5bc8caaadaaa06e9026c0dfa151c38708d0700168c5391c2bb5bc9de14663f3d1d19f7d3108dc641bc8e67bf9fde8697dca59f9a7e40ebba551876053cb2181d7b08511cdf7a02a821baa4f6d41d919d73c49a66be12e342553c2f149c61b57eee05025d4795b37678b122b7f8499a9676760f38dad5ddd4372fa01e36d9b426fdbe0102bd7a02d5f0e626fc1f5e3f7af80784e2822d819f1639260a6316c4a767eec558360a918f0bd524738ae3d592b0851df3c041f31b9d7e0b89ddca9d9740dd76e2745fd1f103a8940eadae8989df998b9cf20293f7c67cee2c66fed223f23ada955e98d4d4b4ce2a881421a5dd23505281d42c11730eb5da2ec6feb3b8b49c57490d725e98cf8338e564550c29bc63cb8d1aa208c1b4ce6e38e36d6c75accae68297fc707c6590dada375a9396fab98a6474e5c93f37a9ad7d6c4d948f2e4efc9cf27b7b31c92248199a3087d4eeee2c78a6af56cbe3905e234b97b3a3ac621ece12642925f94dde7d42bce5240f5ca75bd899c99e8520f7a965007662c0616e33141404010cdad8e44a6f60138d672ca7f7afded0b99860f343a4ee4b1f1ac074a75a1f2e71a41a871c7f4c888a77564a360ad51038ab26c6ce2cffb40b89c34bb51215f0443569622bc3f0bed6b99de2b92b0b082b9dc08b2411bf0277bd8d7704aa66f1a67721639137ba7f37ef11dfd419c61045344c5e07cacbb53f79fa345b55bf7f721e45a7a9dabd779836cd20e2097ec481c17a10b482c9081b1fd4bdbd9e0d2c24f60637812cee27ce534ee14bb6b2631e9db54be5630307ee5cc7de5eb252d7e44eca6aca95449219e4ddff256523a629b9b50496e76ce29db8980622ad995937f18a7440840740aaad78aa21a427e481c32bf2e481f9023d0730b8e99fdb852cecdf9787ec9853075ffbed7300cf591983df1596628ddb1cde830c21fa57008a5d8e3411d4426110b9807e878a9d746aa1b8b6e9d1fe3b8e8cd59de0e9804ec25b631f1069c2752b1bc19e2192e64d1fe4539f3bdfe9ed7dd8bc5a5cbb00fbef529ae0e9648bb709fca010a5854a7d2bcc82847955de216efd4848ea66a9d2e66aa7d642dc5d7b3a5c6cbb764f715dfe7ea722714771fe540f194180b4fb826c15d028be3d0ba8a2a7bcc7c05195d4a813236d355450e062a8e9ac7a208b66314826c96c8a41275741dd9b0b7026608dbf7c90697d4df92f712eea7284fdf22a619e1a5aa31029466946b2a92b6e4d27a6296ee1acfab30b912f10a792208c745b9d634d7718f3bbc76ca59db3de132fda694ce41b7cc6a104fbed69ee32987c629c7a451e377bca48562abc77c53a90e980dacbc478eec32e8893e2b0af97c1491efb72cef50d9835e8ad36a988066fba05c91f86cb83d69a4ed6b22594f327f8c89e0f9bf27755a97fb30a3b8bb9944f45dd85d7b0abd2c971476bc4b4bb2145549e04c6de6999c4477e52c077e27e0d31760342916804fea822ce8b40b59367e1d2e5610648b8f2f1d26c8bbd261f2da0f4397e3f83652f1ec07126433b4cc976b4a5efd387d07487bdc64131d09a7ea72d93374080a0527539f0cbf0997fd266266b27f5e630fc9211f4f1487eb4a471529c23ab2c481a260350b65793442eddab9bcfd4c80759737bc659f53f2a2aa782c7507e065082a6ca57ef8ac261f94434e229ae96ab7f0421538c955b5132673361b201d434624e79d755d0fc2c1b5dc05ed304239c3cd8aa380995305aed3b027c6cd03315c8eed24c122fb5f24f518cb6b7dad2e3d287c2d7817fae76060d5f009c770f56d9b5a0ad613c1616228356b2c738c0645347f8d108381f5ddafc3d7002026df66e612868d30e393de22c41dfc5b7bd84c69ccab4b4d8609ae7061db2cf4f8320744c4e8d6d87ac78b90d8959c4364980063fc346bca46e08ce4ef00a8311418418bc72237013183b4254ea0af0b37bdd0d0deb896229ee1827f5d86ddc254af5493d12c5f0", 0x1000, 0x8, 0x0, 0x1, r11}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x1, r12, &(0x7f0000001640)="1db23b7d501781dd8aaeb22f23dd07da6a76a6507fbfbdf04cc1d672db473e7a15f8a446a2f8a255893f6d5987", 0x2d, 0x107c, 0x0, 0x2, r2}]) dup3(r6, r5, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="525be700009a9beb5de00774237202e39bd2d79502ae7db15c44e0a80a7f3ceb924b6e62d97c8050a7a8f3740669394fb277f8d1b3b9fbdc4fd8581e9064e078f54d926516231f774083bdd03fa1f692c6ea3c5bd36aa5b60dbc55cca36f7fbd69a39eddc9d9827ab589da91c6ff", @ANYRES16=r13, @ANYBLOB="080025bd7000fbdbdf250c000000340006800800010009000000080001000700000008000100fbffffff08000100000000000400021b7f68e50008ff070000"], 0x48}}, 0x4000010) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 438.671170] input: syz1 as /devices/virtual/input/input376 [ 438.801425] input: syz1 as /devices/virtual/input/input377 04:36:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x11000000]}, 0x45c) 04:36:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf4, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2a0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x6, 0x2, 0x1, 0x8}, {0x23ec, 0x25, 0xa4, 0x1}, {0x6, 0x1, 0x7f, 0xfffffffa}, {0xefd, 0x80, 0x6, 0x2}, {0x80, 0x75, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6f7, 0x81, 0x7f, 0xd196}, {0x1, 0x1, 0x1, 0xfffffe00}, {0x3, 0x9, 0x3f, 0xcb0}, {0x6, 0x7f, 0xbf, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r15 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r15, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r14, @ANYBLOB="050006000000000008000200", @ANYRES32=r16, @ANYBLOB="ee52793e9d4455c74c519914ed82654d2368abdf458d26463638607d0536dc93d8c0b9df262a23b494cdd26b874b4a3534433e07cae8a07983c9a0e9d9ee88522aba09"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r21 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r21, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r21, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r20}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r22}]}}}]}, 0x48}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r23, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r25 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r25, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r24, @ANYBLOB="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"/509, @ANYRES32=r26, @ANYBLOB], 0x48}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@can={0x1d, 0x0}, &(0x7f0000000740)=0x80) r28 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r28, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r29 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r29, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0xffffffffffffff58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c}}}]}, 0x48}}, 0x4008000) r31 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r32 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r32, r31, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r33, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r35 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r35, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r33, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r34}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r36}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r31, 0x8933, &(0x7f00000007c0)={'wg2\x00', r36}) r38 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r39 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r39, r38, 0x0) getsockopt$inet_mreqn(r38, 0x0, 0x24, &(0x7f00000009c0)={@dev, @initdev, 0x0}, &(0x7f0000000a00)=0xc) r41 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r42 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r42, r41, 0x0) getsockopt$PNPIPE_IFINDEX(r41, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000b00)={0x4ec, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x2a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xff, 0x94, 0x9, 0x7}]}}}, {0xfffffffffffffe1d, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xbcf1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r43}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x10}, 0x40040) [ 438.996475] input: syz1 as /devices/virtual/input/input378 04:36:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000017c0)={0x2a0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x6, 0x2, 0x1, 0x8}, {0x23ec, 0x25, 0xa4, 0x1}, {0x6, 0x1, 0x7f, 0xfffffffa}, {0xefd, 0x80, 0x6, 0x2}, {0x80, 0x75, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6f7, 0x81, 0x7f, 0xd196}, {0x1, 0x1, 0x1, 0xfffffe00}, {0x3, 0x9, 0x3f, 0xcb0}, {0x6, 0x7f, 0xbf, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000005c0)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x48}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r15 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r15, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r14, @ANYBLOB="050006000000000008000200", @ANYRES32=r16, @ANYBLOB="ee52793e9d4455c74c519914ed82654d2368abdf458d26463638607d0536dc93d8c0b9df262a23b494cdd26b874b4a3534433e07cae8a07983c9a0e9d9ee88522aba09"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r19 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r21 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r21, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r21, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r20}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r22}]}}}]}, 0x48}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r23, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r25 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r25, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r24, @ANYBLOB="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"/509, @ANYRES32=r26, @ANYBLOB], 0x48}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@can={0x1d, 0x0}, &(0x7f0000000740)=0x80) r28 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r28, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r29 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r29, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0xffffffffffffff58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c}}}]}, 0x48}}, 0x4008000) r31 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r32 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r32, r31, 0x0) r33 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r33, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r35 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r35, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r33, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r34}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r36}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r31, 0x8933, &(0x7f00000007c0)={'wg2\x00', r36}) r38 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r39 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r39, r38, 0x0) getsockopt$inet_mreqn(r38, 0x0, 0x24, &(0x7f00000009c0)={@dev, @initdev, 0x0}, &(0x7f0000000a00)=0xc) r41 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r42 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r42, r41, 0x0) getsockopt$PNPIPE_IFINDEX(r41, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000b00)={0x4ec, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x2a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xff, 0x94, 0x9, 0x7}]}}}, {0xfffffffffffffe1d, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r27}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xbcf1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r43}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 04:36:30 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) 04:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x12000000]}, 0x45c) 04:36:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 439.262357] input: syz1 as /devices/virtual/input/input380 [ 439.336804] device batadv0 entered promiscuous mode [ 439.366351] input: syz1 as /devices/virtual/input/input381 [ 439.380642] lo: Cannot use loopback or non-ethernet device as HSR slave. 04:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x14000000]}, 0x45c) [ 439.442400] device batadv0 left promiscuous mode [ 439.513864] input: syz1 as /devices/virtual/input/input382 [ 439.549555] device batadv0 entered promiscuous mode [ 439.594907] input: syz1 as /devices/virtual/input/input383 [ 439.598704] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 439.669327] device batadv0 left promiscuous mode 04:36:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x15000000]}, 0x45c) [ 439.743339] device batadv0 entered promiscuous mode [ 439.819872] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 439.836664] input: syz1 as /devices/virtual/input/input384 [ 439.869849] device batadv0 left promiscuous mode [ 439.952782] device batadv0 entered promiscuous mode 04:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x16000000]}, 0x45c) [ 439.982209] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 440.040901] device batadv0 left promiscuous mode [ 440.085604] input: syz1 as /devices/virtual/input/input386 [ 440.132674] device batadv0 entered promiscuous mode 04:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x1f000000]}, 0x45c) [ 440.189806] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 440.229099] device batadv0 left promiscuous mode [ 440.248539] input: syz1 as /devices/virtual/input/input388 [ 440.312408] device batadv0 entered promiscuous mode [ 440.319270] input: syz1 as /devices/virtual/input/input389 [ 440.349626] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 440.409507] device batadv0 left promiscuous mode 04:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) [ 440.482366] device batadv0 entered promiscuous mode [ 440.498298] input: syz1 as /devices/virtual/input/input390 [ 440.519681] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 440.578173] input: syz1 as /devices/virtual/input/input391 [ 440.589187] device batadv0 left promiscuous mode 04:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2]}, 0x45c) [ 440.639439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 440.666354] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 440.742644] device batadv0 entered promiscuous mode [ 440.747775] input: syz1 as /devices/virtual/input/input392 04:36:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x3]}, 0x45c) [ 440.799657] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 440.839181] device batadv0 left promiscuous mode [ 440.892579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.927016] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 440.980161] input: syz1 as /devices/virtual/input/input394 [ 440.997663] device batadv0 entered promiscuous mode [ 441.049662] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 441.089230] device batadv0 left promiscuous mode 04:36:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2d8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x1f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "2392dcbd2c95965c6110bdcda3feb55dcd"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, "ca2d42e0ea6e5f830230ff2384dfe8a5f3106201be7e46b28bf7b907c5ae3dea106c9c003f2f8171b11c76bfe83a01cf9679db70d017c43a"}, @NL80211_TXRATE_HT={0x2c, 0x2, "f6a358e5172378c70b277a6375814614733230a5e69cd85455b41bd3fdb12394161066a4c2b04a7d"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7, 0x0, 0x2, 0xb5d, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "1bd5727fdfe0898083bef6795aec062c8e010c4418"}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4184, 0x40, 0x4, 0xf800, 0x200, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x38, 0x6ee3, 0x6, 0x9, 0x2, 0xbec]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "de3c9c57f6b4d5a974f14dcc97004237803ccc662a8d75669cdc5592"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6064, 0x7f, 0xfffc, 0x3, 0x81, 0x200]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, "a2ae939fc97f39b6e233a7133d3c1ff01c15f86b39c595d23138a746423c5d12b2d56d2908b2ec0228bebee97f933d237b526f8679ccf796ba9e3b2b0b66a6451cbf46b9cead3f093e"}, @NL80211_TXRATE_HT={0x6, 0x2, "f125"}, @NL80211_TXRATE_LEGACY={0x24, 0x1, "49d00456d71221ca4c8586a682144c68d2dc064aa513f27705b2d94c6baeb43d"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, "d0c057e249cfe70018dba60589565c"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 441.152552] device batadv0 entered promiscuous mode [ 441.189694] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 441.249258] device batadv0 left promiscuous mode 04:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1f00}, 0x45c) 04:36:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="5d82255abc863acecaf4b67f7ee3240354f5b39f4e1103ee6c7fa36dc230f5b31f4233739bd077ba1779d69ad5da4ea20f2e3c37b0aa359066a75fb57dae1b6051fb0311163cba6b3e07b9df195336eb95eda9e89d0a2ec44ac49c75eb62eb01c3e8c1d8e267856d56cfb07811a9463fb71153c5d2ff3d7dc93b08b0274f0739a26e07a7ff1dd6432c557985a5232c1a8d8eb040ee59e38610917158c53cf8bad8a0eeaa14e142612cfbccb0bfe3a2f107b01ac6548cb0baf19c74e699aee634f508cfc48d79bbd077086d7e4940b60bdc75098394663c108c9114ad4118d47360f760730ded1b83d9bd391d1fc8ffe31a94ff09dd23884e49c61e7bae74a619fb0ee6a881623a230aa3f5ad9c07b1df7ba10e814f24d1fef16f02acdeb90df3012cabf027e8c1a6a88eb9dcf2feda982da20b21347090445cff904a8f8685281ce9db288177af4cebc2397c9e02a0b30621186219e6cff9b2b7204edb6bbf575ea2b26aab1dad66c80b68829762789ab9ee966750a2fae76ffa1fc90180809644490734601c0c8d83329dabe80f549f2012e85eef6d66345843131b4cc197a6293960decaf21c33636c333b4e1a4390b2af4956e5cb2d727c5e471abf5e8cf52d9a1fd963818e70c3c1bd0ecfa4d6a9c6bfd55789a425a020317cb8bb4b4c7590dcc58bd40b49905278363c94daf21039a207d1a6d67da5f4e7651f0bfa4de36484634cca559a944298e3fc1e0d9840b72a4a834b0f0864029dbe3de4fca978d973dee014fb1f37b907402cfc3386c451f7664dfc30a28411b18a16b39bfc13fb8aa6d9018ec1baa89dd351af3622ca3076e64b1f73a2bf304b05dfeec622fd362c7bd4e953b499ed68369f31006e134c1241007bae0c1ae56b792bb38d1597dced623237c75c11614694f4a34f2390c58080b7df95ad7235e2e81b5a0470a59a2423ff9baad8a53c11232c6f82ad2c94d322fee9f8b767f8ffe11f9e3a1b077873872cbd6b3883412cd758c4059e43068160f2d8a1ff58abcb71e45ed6de7918cd66d47560e751f59ab622dbe765da03411db4e4b7915a22c3d0fb788d94cbb0274d1bb2e837a9a0c0972502aeec55947e4ab8d87b108b31b77f7cab05418e4887efd7fc06df806d6f1c087d9b0885ede3f67246510bacc8cdb48244d0a7e6bbb16b743b17b37c414acea9dfb37f16a8fb9483fc8add0b80c61882c5564f1ed9161e67ad5997ad6325f8a2e7a0a69d9f44adcaf8ba51a609ef1514593ff3703ff80269e93c55b4a89e476b2a8d25423ae70e96a2c70bb911f291247b28784079a1a8012e8ee298356f5f861dfab876c7b2863de56ba38b5c5d5fff972eda0bcf463dcd1b975f7f726081788117d4d5f60fdbd7cfb753a87e61f5d8d9459ce28c0eb6c00fe52e828a49775af4b375fe8b002c5541dc95409508b503e3728e8f"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) close(r0) 04:36:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x4]}, 0x45c) 04:36:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 441.372880] input: syz1 as /devices/virtual/input/input396 04:36:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1200}, 0x45c) [ 441.454052] input: syz1 as /devices/virtual/input/input397 04:36:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x1200}, 0x45c) [ 441.555477] input: syz1 as /devices/virtual/input/input398 [ 441.627241] input: syz1 as /devices/virtual/input/input399 [ 441.663358] input: syz1 as /devices/virtual/input/input400 04:36:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x5]}, 0x45c) 04:36:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf8, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0xcc, 0x18, "ec2786171211783972865e9803cccb4031799c413dc83e1fac099fdf9b24a8ed62824eec3966d34b73785a4b03474c120cc191134702c4fedaa81090396c341ae3cf9eaca77888c15fc10dbef271035d21dc6ffc573a7a27c5e2f08817b7a25d3726a167db2ae2a0c8501c9be6191c16392c0cebc3fb8220660511f53ad923b013ad875bb0932884b9db720ad849ca852c97e429298e920b4b56c0eef6d5ba65491955b021b20f0820ee4f8246b686baadc8e60dce1071e0882f5919aaf93f5c123a189e967a5e27"}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:32 executing program 2 (fault-call:11 fault-nth:0): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x181000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) dup3(r3, r4, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000080)={0x5f, 0x4, 0x0, 0x9, &(0x7f0000000100)=[{0x3, 0x1, 0x1ff, 0xee}, {0x3, 0x1, 0x8, 0x8911}, {0x1, 0x5, 0x0, 0x101}, {0x7, 0xfca, 0x9, 0x7}, {0x800, 0x3, 0x2, 0x7ff}, {0x4, 0x40, 0x3ff}, {0x0, 0x5b9, 0x2, 0x3}, {0x80, 0x25e8, 0x7ff, 0x7}, {0x1, 0x7, 0x6, 0x400}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00', 0x4000}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 441.814134] input: syz1 as /devices/virtual/input/input401 04:36:32 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="5d82255abc863acecaf4b67f7ee3240354f5b39f4e1103ee6c7fa36dc230f5b31f4233739bd077ba1779d69ad5da4ea20f2e3c37b0aa359066a75fb57dae1b6051fb0311163cba6b3e07b9df195336eb95eda9e89d0a2ec44ac49c75eb62eb01c3e8c1d8e267856d56cfb07811a9463fb71153c5d2ff3d7dc93b08b0274f0739a26e07a7ff1dd6432c557985a5232c1a8d8eb040ee59e38610917158c53cf8bad8a0eeaa14e142612cfbccb0bfe3a2f107b01ac6548cb0baf19c74e699aee634f508cfc48d79bbd077086d7e4940b60bdc75098394663c108c9114ad4118d47360f760730ded1b83d9bd391d1fc8ffe31a94ff09dd23884e49c61e7bae74a619fb0ee6a881623a230aa3f5ad9c07b1df7ba10e814f24d1fef16f02acdeb90df3012cabf027e8c1a6a88eb9dcf2feda982da20b21347090445cff904a8f8685281ce9db288177af4cebc2397c9e02a0b30621186219e6cff9b2b7204edb6bbf575ea2b26aab1dad66c80b68829762789ab9ee966750a2fae76ffa1fc90180809644490734601c0c8d83329dabe80f549f2012e85eef6d66345843131b4cc197a6293960decaf21c33636c333b4e1a4390b2af4956e5cb2d727c5e471abf5e8cf52d9a1fd963818e70c3c1bd0ecfa4d6a9c6bfd55789a425a020317cb8bb4b4c7590dcc58bd40b49905278363c94daf21039a207d1a6d67da5f4e7651f0bfa4de36484634cca559a944298e3fc1e0d9840b72a4a834b0f0864029dbe3de4fca978d973dee014fb1f37b907402cfc3386c451f7664dfc30a28411b18a16b39bfc13fb8aa6d9018ec1baa89dd351af3622ca3076e64b1f73a2bf304b05dfeec622fd362c7bd4e953b499ed68369f31006e134c1241007bae0c1ae56b792bb38d1597dced623237c75c11614694f4a34f2390c58080b7df95ad7235e2e81b5a0470a59a2423ff9baad8a53c11232c6f82ad2c94d322fee9f8b767f8ffe11f9e3a1b077873872cbd6b3883412cd758c4059e43068160f2d8a1ff58abcb71e45ed6de7918cd66d47560e751f59ab622dbe765da03411db4e4b7915a22c3d0fb788d94cbb0274d1bb2e837a9a0c0972502aeec55947e4ab8d87b108b31b77f7cab05418e4887efd7fc06df806d6f1c087d9b0885ede3f67246510bacc8cdb48244d0a7e6bbb16b743b17b37c414acea9dfb37f16a8fb9483fc8add0b80c61882c5564f1ed9161e67ad5997ad6325f8a2e7a0a69d9f44adcaf8ba51a609ef1514593ff3703ff80269e93c55b4a89e476b2a8d25423ae70e96a2c70bb911f291247b28784079a1a8012e8ee298356f5f861dfab876c7b2863de56ba38b5c5d5fff972eda0bcf463dcd1b975f7f726081788117d4d5f60fdbd7cfb753a87e61f5d8d9459ce28c0eb6c00fe52e828a49775af4b375fe8b002c5541dc95409508b503e3728e8f"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) close(r0) [ 441.961108] input: syz1 as /devices/virtual/input/input402 [ 442.002430] FAULT_INJECTION: forcing a failure. [ 442.002430] name failslab, interval 1, probability 0, space 0, times 0 [ 442.051062] CPU: 1 PID: 21125 Comm: syz-executor.2 Not tainted 4.19.104-syzkaller #0 [ 442.059531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.068923] Call Trace: [ 442.071544] dump_stack+0x197/0x210 [ 442.075213] should_fail.cold+0xa/0x1b [ 442.079132] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.084270] ? lock_downgrade+0x880/0x880 [ 442.088629] __should_failslab+0x121/0x190 [ 442.092890] should_failslab+0x9/0x14 [ 442.096926] kmem_cache_alloc_trace+0x2cc/0x760 [ 442.101623] ? find_held_lock+0x35/0x130 [ 442.105706] ? dev_map_notification+0x2b4/0x3d0 [ 442.110428] netdevice_event+0x1c8/0x7e0 [ 442.114515] ? update_gid_event_work_handler+0xc0/0xc0 [ 442.120314] ? _roce_del_all_netdev_gids+0x30/0x30 [ 442.125269] ? roce_gid_type_mask_support+0x100/0x100 [ 442.130495] ? dev_map_notification+0x34/0x3d0 [ 442.135218] notifier_call_chain+0xc2/0x230 [ 442.139698] raw_notifier_call_chain+0x2e/0x40 [ 442.144460] call_netdevice_notifiers_info+0x3f/0x90 [ 442.154327] rollback_registered_many+0x894/0xda0 [ 442.159246] ? tun_show_group+0x180/0x180 [ 442.163431] ? generic_xdp_install+0x3d0/0x3d0 [ 442.168054] ? mark_held_locks+0xb1/0x100 [ 442.172234] ? linkwatch_schedule_work+0x13c/0x170 [ 442.177187] ? queue_delayed_work_on+0xe6/0x200 [ 442.181890] ? lockdep_hardirqs_on+0x415/0x5d0 [ 442.186506] rollback_registered+0x109/0x1d0 [ 442.190942] ? rollback_registered_many+0xda0/0xda0 [ 442.196007] unregister_netdevice_queue+0x1ee/0x2c0 [ 442.201053] __tun_detach+0xd9b/0x1050 [ 442.204978] ? tun_chr_ioctl+0x40/0x40 [ 442.208889] tun_chr_close+0xe0/0x180 [ 442.212735] __fput+0x2dd/0x8b0 [ 442.216160] ____fput+0x16/0x20 [ 442.219467] task_work_run+0x145/0x1c0 [ 442.223385] exit_to_usermode_loop+0x273/0x2c0 [ 442.227999] do_syscall_64+0x53d/0x620 [ 442.232052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.237259] RIP: 0033:0x45c6c9 [ 442.240468] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.259732] RSP: 002b:00007f354c20cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 442.267466] RAX: 0000000000000000 RBX: 00007f354c20d6d4 RCX: 000000000045c6c9 [ 442.274956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 442.282330] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.289639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 04:36:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:33 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) close(r1) [ 442.296934] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000000 04:36:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x11]}, 0x45c) [ 442.437977] input: syz1 as /devices/virtual/input/input403 04:36:33 executing program 2 (fault-call:11 fault-nth:1): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 442.537023] input: syz1 as /devices/virtual/input/input404 04:36:33 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) close(r0) 04:36:33 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080)=""/221, 0xdd) 04:36:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x12]}, 0x45c) [ 442.653592] FAULT_INJECTION: forcing a failure. [ 442.653592] name failslab, interval 1, probability 0, space 0, times 0 [ 442.775077] CPU: 1 PID: 21148 Comm: syz-executor.2 Not tainted 4.19.104-syzkaller #0 [ 442.783163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.792535] Call Trace: [ 442.795161] dump_stack+0x197/0x210 [ 442.798823] should_fail.cold+0xa/0x1b [ 442.802744] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.807878] ? lock_downgrade+0x880/0x880 [ 442.812063] __should_failslab+0x121/0x190 [ 442.816326] should_failslab+0x9/0x14 [ 442.820148] kmem_cache_alloc_node+0x26c/0x710 [ 442.824755] ? lock_downgrade+0x880/0x880 [ 442.829048] __alloc_skb+0xd5/0x5f0 [ 442.832697] ? skb_trim+0x190/0x190 [ 442.836353] ? kfree+0x170/0x220 [ 442.839742] ? __devinet_sysctl_unregister.isra.0+0x6b/0xb0 [ 442.845470] ? kfree+0x170/0x220 [ 442.848884] ? lockdep_hardirqs_on+0x415/0x5d0 [ 442.853621] inet_netconf_notify_devconf+0xea/0x250 [ 442.858690] __devinet_sysctl_unregister.isra.0+0x85/0xb0 [ 442.858712] devinet_sysctl_unregister+0x92/0xf0 [ 442.858731] inetdev_event+0xa18/0x1240 [ 442.858748] ? lock_downgrade+0x880/0x880 [ 442.858771] ? inetdev_init+0x470/0x470 [ 442.858791] ? up_read+0x1a/0x110 [ 442.858807] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 442.858832] notifier_call_chain+0xc2/0x230 [ 442.858846] ? notifier_call_chain+0xc2/0x230 [ 442.858873] raw_notifier_call_chain+0x2e/0x40 [ 442.858894] call_netdevice_notifiers_info+0x3f/0x90 [ 442.858915] rollback_registered_many+0x894/0xda0 [ 442.858936] ? tun_show_group+0x180/0x180 [ 442.858954] ? generic_xdp_install+0x3d0/0x3d0 [ 442.858977] ? mark_held_locks+0xb1/0x100 [ 442.858997] ? linkwatch_schedule_work+0x13c/0x170 [ 442.859014] ? queue_delayed_work_on+0xe6/0x200 [ 442.859032] ? lockdep_hardirqs_on+0x415/0x5d0 [ 442.859067] rollback_registered+0x109/0x1d0 [ 442.859085] ? rollback_registered_many+0xda0/0xda0 [ 442.859113] unregister_netdevice_queue+0x1ee/0x2c0 [ 442.955531] __tun_detach+0xd9b/0x1050 [ 442.959465] ? tun_chr_ioctl+0x40/0x40 [ 442.963388] tun_chr_close+0xe0/0x180 [ 442.967222] __fput+0x2dd/0x8b0 [ 442.970540] ____fput+0x16/0x20 [ 442.973843] task_work_run+0x145/0x1c0 [ 442.977771] exit_to_usermode_loop+0x273/0x2c0 [ 442.982390] do_syscall_64+0x53d/0x620 [ 442.986316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.991532] RIP: 0033:0x45c6c9 [ 442.994745] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.013698] RSP: 002b:00007f354c20cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 443.021429] RAX: 0000000000000000 RBX: 00007f354c20d6d4 RCX: 000000000045c6c9 [ 443.028721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 443.036030] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.043587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 443.050881] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000001 [ 443.071440] input: syz1 as /devices/virtual/input/input406 04:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x14]}, 0x45c) 04:36:34 executing program 2 (fault-call:11 fault-nth:2): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 443.324790] input: syz1 as /devices/virtual/input/input407 04:36:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x2c, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 443.500769] input: syz1 as /devices/virtual/input/input408 04:36:34 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) close(r0) 04:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x15]}, 0x45c) [ 443.696242] input: syz1 as /devices/virtual/input/input409 04:36:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 443.790007] input: syz1 as /devices/virtual/input/input410 04:36:34 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) [ 443.860258] FAULT_INJECTION: forcing a failure. [ 443.860258] name failslab, interval 1, probability 0, space 0, times 0 [ 443.899236] CPU: 0 PID: 21186 Comm: syz-executor.2 Not tainted 4.19.104-syzkaller #0 [ 443.907241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.907259] Call Trace: [ 443.919401] dump_stack+0x197/0x210 [ 443.923129] should_fail.cold+0xa/0x1b [ 443.927087] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 443.932238] ? lock_downgrade+0x880/0x880 [ 443.936480] __should_failslab+0x121/0x190 [ 443.940946] should_failslab+0x9/0x14 [ 443.946464] kmem_cache_alloc_node_trace+0x274/0x720 [ 443.951623] ? __alloc_skb+0xd5/0x5f0 [ 443.955506] __kmalloc_node_track_caller+0x3d/0x80 [ 443.960492] __kmalloc_reserve.isra.0+0x40/0xf0 [ 443.965213] __alloc_skb+0x10b/0x5f0 [ 443.969068] ? skb_trim+0x190/0x190 [ 443.972738] ? kfree+0x170/0x220 [ 443.976141] ? __devinet_sysctl_unregister.isra.0+0x6b/0xb0 [ 443.982112] ? kfree+0x170/0x220 [ 443.985532] ? lockdep_hardirqs_on+0x415/0x5d0 [ 443.990876] inet_netconf_notify_devconf+0xea/0x250 [ 443.990915] input: syz1 as /devices/virtual/input/input411 [ 443.995936] __devinet_sysctl_unregister.isra.0+0x85/0xb0 [ 443.995967] devinet_sysctl_unregister+0x92/0xf0 [ 444.012125] inetdev_event+0xa18/0x1240 [ 444.016144] ? lock_downgrade+0x880/0x880 [ 444.020358] ? inetdev_init+0x470/0x470 [ 444.024390] ? up_read+0x1a/0x110 [ 444.028013] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 444.033261] notifier_call_chain+0xc2/0x230 [ 444.037726] ? notifier_call_chain+0xc2/0x230 [ 444.042410] raw_notifier_call_chain+0x2e/0x40 [ 444.047065] call_netdevice_notifiers_info+0x3f/0x90 [ 444.052231] rollback_registered_many+0x894/0xda0 [ 444.057127] ? tun_show_group+0x180/0x180 [ 444.061477] ? generic_xdp_install+0x3d0/0x3d0 [ 444.066114] ? mark_held_locks+0xb1/0x100 [ 444.070308] ? linkwatch_schedule_work+0x13c/0x170 [ 444.075399] ? queue_delayed_work_on+0xe6/0x200 [ 444.080116] ? lockdep_hardirqs_on+0x415/0x5d0 [ 444.084757] rollback_registered+0x109/0x1d0 [ 444.089216] ? rollback_registered_many+0xda0/0xda0 [ 444.094299] unregister_netdevice_queue+0x1ee/0x2c0 [ 444.099379] __tun_detach+0xd9b/0x1050 [ 444.103346] ? tun_chr_ioctl+0x40/0x40 [ 444.107275] tun_chr_close+0xe0/0x180 04:36:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x16]}, 0x45c) [ 444.111132] __fput+0x2dd/0x8b0 [ 444.114633] ____fput+0x16/0x20 [ 444.117947] task_work_run+0x145/0x1c0 [ 444.122029] exit_to_usermode_loop+0x273/0x2c0 [ 444.126669] do_syscall_64+0x53d/0x620 [ 444.130611] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.135841] RIP: 0033:0x45c6c9 [ 444.139070] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.158179] RSP: 002b:00007f354c20cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 444.166202] RAX: 0000000000000000 RBX: 00007f354c20d6d4 RCX: 000000000045c6c9 [ 444.173510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 444.180820] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 444.188216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 444.195883] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000002 [ 444.238168] input: syz1 as /devices/virtual/input/input412 04:36:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x300]}, 0x45c) 04:36:35 executing program 2 (fault-call:11 fault-nth:3): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="5d82255abc863acecaf4b67f7ee3240354f5b39f4e1103ee6c7fa36dc230f5b31f4233739bd077ba1779d69ad5da4ea20f2e3c37b0aa359066a75fb57dae1b6051fb0311163cba6b3e07b9df195336eb95eda9e89d0a2ec44ac49c75eb62eb01c3e8c1d8e267856d56cfb07811a9463fb71153c5d2ff3d7dc93b08b0274f0739a26e07a7ff1dd6432c557985a5232c1a8d8eb040ee59e38610917158c53cf8bad8a0eeaa14e142612cfbccb0bfe3a2f107b01ac6548cb0baf19c74e699aee634f508cfc48d79bbd077086d7e4940b60bdc75098394663c108c9114ad4118d47360f760730ded1b83d9bd391d1fc8ffe31a94ff09dd23884e49c61e7bae74a619fb0ee6a881623a230aa3f5ad9c07b1df7ba10e814f24d1fef16f02acdeb90df3012cabf027e8c1a6a88eb9dcf2feda982da20b21347090445cff904a8f8685281ce9db288177af4cebc2397c9e02a0b30621186219e6cff9b2b7204edb6bbf575ea2b26aab1dad66c80b68829762789ab9ee966750a2fae76ffa1fc90180809644490734601c0c8d83329dabe80f549f2012e85eef6d66345843131b4cc197a6293960decaf21c33636c333b4e1a4390b2af4956e5cb2d727c5e471abf5e8cf52d9a1fd963818e70c3c1bd0ecfa4d6a9c6bfd55789a425a020317cb8bb4b4c7590dcc58bd40b49905278363c94daf21039a207d1a6d67da5f4e7651f0bfa4de36484634cca559a944298e3fc1e0d9840b72a4a834b0f0864029dbe3de4fca978d973dee014fb1f37b907402cfc3386c451f7664dfc30a28411b18a16b39bfc13fb8aa6d9018ec1baa89dd351af3622ca3076e64b1f73a2bf304b05dfeec622fd362c7bd4e953b499ed68369f31006e134c1241007bae0c1ae56b792bb38d1597dced623237c75c11614694f4a34f2390c58080b7df95ad7235e2e81b5a0470a59a2423ff9baad8a53c11232c6f82ad2c94d322fee9f8b767f8ffe11f9e3a1b077873872cbd6b3883412cd758c4059e43068160f2d8a1ff58abcb71e45ed6de7918cd66d47560e751f59ab622dbe765da03411db4e4b7915a22c3d0fb788d94cbb0274d1bb2e837a9a0c0972502aeec55947e4ab8d87b108b31b77f7cab05418e4887efd7fc06df806d6f1c087d9b0885ede3f67246510bacc8cdb48244d0a7e6bbb16b743b17b37c414acea9dfb37f16a8fb9483fc8add0b80c61882c5564f1ed9161e67ad5997ad6325f8a2e7a0a69d9f44adcaf8ba51a609ef1514593ff3703ff80269e93c55b4a89e476b2a8d25423ae70e96a2c70bb911f291247b28784079a1a8012e8ee298356f5f861dfab876c7b2863de56ba38b5c5d5fff972eda0bcf463dcd1b975f7f726081788117d4d5f60fdbd7cfb753a87e61f5d8d9459ce28c0eb6c00fe52e828a49775af4b375fe8b002c5541dc95409508b503e3728e8f"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) 04:36:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 444.424316] input: syz1 as /devices/virtual/input/input413 [ 444.540842] input: syz1 as /devices/virtual/input/input414 04:36:35 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x49002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000580)={@loopback, 0x0}, &(0x7f00000005c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000002040)='/dev/zero\x00', 0x802, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000001780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000001c00)={0x3d8, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}, @ETHTOOL_A_LINKMODES_OURS={0x358, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '[mime_type$[@(!@\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "afbad56843eecc2e6e70fa02d6f4f1694da29568809c7b04d3e538f65c0e2c6026796e617728f958c52560da88d73f654a33d26c13d39cb582a841154dede162f8e00d846ee0bf37e121b7774de01d297be0e3ab65b6ab3c122725a5e22d500f4b9ca91e5c29b50360e7ae0e69417855a5542ddb23c2ea3cfec05dad5235f835291acd3106e956070b8d90fd6fc41894f47a974b3989cb7072566d8a5c9a44002c82d7ab212578f667f1e3e49f21d50c7eeaf1eea7c0c2ab405c76f4020981330f1186f2d603c624ef5be3786f6f25e9c5bc5d4685"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "a6057ae27ec546ca02f5b8026ff242ee4e4fb6739c1ce2dad256afd9c29290f901ec74eac315a5c90879bdf60b9552faad598de3fd761d730418f8e2a34e5b639402d4c7e544986228abb81cf334417d4a4c0144c684ebf9e7b0a8a80b06d1ca37ef43be181f93cc88af7ccde5"}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, '-:&lojproc!*ppp1wlan0&cpuset\x8d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'proc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19b8000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$&)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3aee}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x20, 0x2, 'ne\x02devsim\n\xf66-\xf8\xca\x94-\xe5S\xcc\xd5\xf4\xa0\xc9hT\x997'}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'hash:ip,port,net\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'hash:ip,port,net\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffffffc1}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfd}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d0) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r16 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r16, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r15}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r17}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) r19 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r20 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r20, r19, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000060}, 0x60040054) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 444.643778] FAULT_INJECTION: forcing a failure. [ 444.643778] name failslab, interval 1, probability 0, space 0, times 0 [ 444.689767] CPU: 1 PID: 21217 Comm: syz-executor.2 Not tainted 4.19.104-syzkaller #0 [ 444.698134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.707528] Call Trace: [ 444.710233] dump_stack+0x197/0x210 [ 444.713898] should_fail.cold+0xa/0x1b [ 444.718000] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 444.723134] ? lock_downgrade+0x880/0x880 [ 444.727322] __should_failslab+0x121/0x190 [ 444.731605] should_failslab+0x9/0x14 [ 444.731627] kmem_cache_alloc_node+0x26c/0x710 [ 444.740153] ? lock_downgrade+0x880/0x880 [ 444.744426] __alloc_skb+0xd5/0x5f0 [ 444.748207] ? skb_trim+0x190/0x190 [ 444.751871] ? kfree+0x170/0x220 [ 444.751895] ? __addrconf_sysctl_unregister.isra.0+0x92/0xe0 [ 444.761088] ? kfree+0x170/0x220 [ 444.764602] ? lockdep_hardirqs_on+0x415/0x5d0 [ 444.769211] inet6_netconf_notify_devconf+0xab/0x1e0 [ 444.774384] __addrconf_sysctl_unregister.isra.0+0xa7/0xe0 [ 444.780130] addrconf_sysctl_unregister+0x91/0xf0 [ 444.785006] addrconf_ifdown+0xc4d/0x10d0 [ 444.789194] addrconf_notify+0x5cd/0x2160 [ 444.793364] ? __local_bh_enable_ip+0x15a/0x270 [ 444.798081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.803639] ? tls_dev_event+0x11c/0xcb0 [ 444.807955] ? clusterip_netdev_event+0x474/0x670 [ 444.807976] ? trace_hardirqs_on+0x67/0x220 [ 444.817148] ? clusterip_netdev_event+0x474/0x670 [ 444.822051] ? inet6_ifinfo_notify+0x150/0x150 [ 444.826664] ? _raw_spin_unlock_bh+0x31/0x40 [ 444.831268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.836833] ? ip6mr_device_event+0x1ad/0x220 [ 444.842782] notifier_call_chain+0xc2/0x230 [ 444.847157] ? notifier_call_chain+0xc2/0x230 [ 444.851693] raw_notifier_call_chain+0x2e/0x40 [ 444.856494] call_netdevice_notifiers_info+0x3f/0x90 [ 444.861634] rollback_registered_many+0x894/0xda0 [ 444.870798] ? tun_show_group+0x180/0x180 [ 444.874975] ? generic_xdp_install+0x3d0/0x3d0 [ 444.879667] ? mark_held_locks+0xb1/0x100 [ 444.883864] ? linkwatch_schedule_work+0x13c/0x170 [ 444.890120] ? queue_delayed_work_on+0xe6/0x200 [ 444.894827] ? lockdep_hardirqs_on+0x415/0x5d0 [ 444.899446] rollback_registered+0x109/0x1d0 [ 444.903897] ? rollback_registered_many+0xda0/0xda0 [ 444.909042] unregister_netdevice_queue+0x1ee/0x2c0 [ 444.914093] __tun_detach+0xd9b/0x1050 [ 444.918022] ? tun_chr_ioctl+0x40/0x40 [ 444.921939] tun_chr_close+0xe0/0x180 [ 444.925777] __fput+0x2dd/0x8b0 [ 444.929095] ____fput+0x16/0x20 [ 444.932403] task_work_run+0x145/0x1c0 [ 444.936330] exit_to_usermode_loop+0x273/0x2c0 [ 444.940953] do_syscall_64+0x53d/0x620 [ 444.945079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.950292] RIP: 0033:0x45c6c9 [ 444.953507] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.972550] RSP: 002b:00007f354c20cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 444.980287] RAX: 0000000000000000 RBX: 00007f354c20d6d4 RCX: 000000000045c6c9 [ 444.987665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 444.995260] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.002555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 445.009849] R13: 0000000000000076 R14: 00000000005032f2 R15: 0000000000000003 04:36:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x500]}, 0x45c) [ 445.114518] input: syz1 as /devices/virtual/input/input415 [ 445.133176] device batadv0 entered promiscuous mode 04:36:36 executing program 2 (fault-call:11 fault-nth:4): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 445.179195] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 445.215684] input: syz1 as /devices/virtual/input/input416 [ 445.271621] device batadv0 left promiscuous mode 04:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1100]}, 0x45c) 04:36:36 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 445.449060] input: syz1 as /devices/virtual/input/input417 04:36:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 445.530809] input: syz1 as /devices/virtual/input/input418 04:36:36 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, '\x00', 0x2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)='Su6A', 0x4) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 04:36:36 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1200]}, 0x45c) 04:36:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={r4, 0xb6410dd3970a1d55, r5}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x9) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 445.824517] input: syz1 as /devices/virtual/input/input419 04:36:36 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x2, 0xd2, &(0x7f0000000000)="c35d99e3bb163a52c214e907fdd675c743ed32e216e07fdfe13fae3fbbd3e9a7b6271bc0618888ecca4097409f421de9c832067bb4a7465eaaf983048163bbecf6687254b43dbce4f81171c0154d864ded225e2df36ee84a575e64ddb95b13e3b4f3a1063e942aca2bcd6a355e11f2113dd03bbe2ed7426668696e37f5852d702350d4478a9626cd9d3c4418bcdfd8182b20ba403a62f2d2c5840415561fb764506a4634bbc246b92242c2aa938d14cbb2792202f5b7eb4f2492fe63674605241c7aa2e3351b7bf56e028561095477986e94"}) 04:36:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6erspan0\x00', {}, 0x80}) r2 = eventfd2(0x6, 0x801) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000100)=0x5) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) 04:36:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1400]}, 0x45c) 04:36:36 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r2 = socket(0x1f, 0xa, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r12 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r13}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r3, 0x10, 0x9, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 446.095805] input: syz1 as /devices/virtual/input/input421 04:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1500]}, 0x45c) 04:36:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 446.290358] input: syz1 as /devices/virtual/input/input423 04:36:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 446.383240] device batadv0 entered promiscuous mode 04:36:37 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r2, 0x0, 0x8000, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000740)={0x4}) kcmp(r4, 0x0, 0x2, r2, r1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r4}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r9, 0x0, 0x8000, 0x2) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000740)={0x4}) kcmp(r11, 0x0, 0x2, r9, r8) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r11}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r12, @ANYBLOB=',group_id=', @ANYRESDEC=r13, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r15, r14, 0x0) fstat(r15, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r18 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r18, r17, 0x0) fstat(r17, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r21, 0x5423, &(0x7f00000000c0)=0x3) r22 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r21, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r22, 0x0, 0x8000, 0x2) r23 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r23, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r23, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r23, 0x3, r22, &(0x7f0000000740)={0x4}) kcmp(r24, 0x0, 0x2, r22, r21) ioctl$DRM_IOCTL_GET_CLIENT(r20, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r24}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r25, @ANYBLOB=',group_id=', @ANYRESDEC=r26, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) getgroups(0x5, &(0x7f0000000140)=[r6, r13, r16, r19, r26]) r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r28 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r29 = syz_open_dev$tty20(0xc, 0x4, 0x0) r30 = dup3(r29, r28, 0x0) ioctl$TIOCMBIS(r28, 0x5416, &(0x7f0000000000)=0x8001) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r31 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r32 = syz_open_dev$tty20(0xc, 0x4, 0x0) r33 = syz_open_pts(r30, 0x103041) ioctl$TIOCNXCL(r33, 0x540d) dup3(r32, r31, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r31, 0x8935, &(0x7f0000000080)={'syzkaller0\x00', 0x9}) 04:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1600]}, 0x45c) [ 446.434952] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 446.490079] device batadv0 left promiscuous mode [ 446.510922] input: syz1 as /devices/virtual/input/input425 [ 446.582288] input: syz1 as /devices/virtual/input/input426 [ 446.583484] device batadv0 entered promiscuous mode 04:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1f00]}, 0x45c) [ 446.649885] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 446.689088] device batadv0 left promiscuous mode [ 446.715313] input: syz1 as /devices/virtual/input/input427 04:36:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000000)) close(r1) [ 446.799686] input: syz1 as /devices/virtual/input/input428 [ 446.815076] device batadv0 entered promiscuous mode 04:36:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1000000]}, 0x45c) [ 446.900593] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 446.919778] input: syz1 as /devices/virtual/input/input429 [ 446.959649] device batadv0 left promiscuous mode [ 446.965351] input: syz1 as /devices/virtual/input/input430 04:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000]}, 0x45c) 04:36:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x18000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 447.194896] input: syz1 as /devices/virtual/input/input431 04:36:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x280, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x977812c2e3feb5ce}) close(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2100, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000ffdbdf250000000005001300030000000500060007000000140008006272696467653000000000000000000008001100010000000c000f00800000000000000005000701020000000800110001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 04:36:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x540, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf25150000003c00098008000100ff0700000800010040000000080001000800000008000100780000000800020001000000080001000200000008000100060000001400098008000200020000000800020005000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040086) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r1, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) pkey_alloc(0x0, 0x2) socketpair(0x0, 0x0, 0x1f, 0x0) r3 = getpgrp(0xffffffffffffffff) tkill(r3, 0x10) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000b, 0x110, r4, 0x0) 04:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x3000000]}, 0x45c) 04:36:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x7, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="82404fbebe6b0dda0fa438f83d3923d0e2efd32331", 0x15}, {&(0x7f0000000080)="71394b574bf143f8191fe418e87dcb4858f7d76e76d0511e0b96ded29ff65f12d405392954c4a35f6eb544b41b17b05b733e0106a6ddcdd8c4739806bad781a21d4da1262c00384ca88c1d6d284edd5a70a8fb3c4b94c16e01fe1d517f264b8045994ba2b5500a89aa518c592d2e927c4847ae74779c4e24bd103f717038495bab48d8627e49a98b3f7ccaf2c6", 0x8d}, {&(0x7f0000000200)="06fae7cc06c63e379dd782397eb9f4b60d3b9fedcaa6bc26fdeb6c8a28dffffed3a48229d56105226690407e6be97be0ef104c0b651cb62476b98918161baf878df0fab0efd21ded45b9a9", 0x4b}], 0x3) sysfs$1(0x1, &(0x7f0000000000)='wlan1)nodev$security{\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000280)={0x425a4321, 0x2, 0x4, 0x10, 0x2, 0x3, 0xc}) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 447.471747] input: syz1 as /devices/virtual/input/input433 04:36:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x4000000]}, 0x45c) 04:36:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x10}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0xfffffbd5}) 04:36:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) 04:36:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0x240) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xcb4}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r5) [ 447.709376] input: syz1 as /devices/virtual/input/input435 04:36:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 447.810607] input: syz1 as /devices/virtual/input/input436 04:36:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x86b, 0x80000001, 0x8, 0x8f6, 0x1, "0b0be2ac3dc1c803a733ae2a8c42c8c363a6e0"}) 04:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x5000000]}, 0x45c) 04:36:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) [ 448.059800] input: syz1 as /devices/virtual/input/input437 04:36:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x85ac, 0x1, 0x3f, 0x79, 0x200}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 448.134137] input: syz1 as /devices/virtual/input/input438 04:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x11000000]}, 0x45c) 04:36:39 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ce022bbd7000fddbdf251c0000000600ed00a505000006001401e803000079969d7ad605a1e286f611629881ee629506000000aeff0d04f791d4c6e2cd5be50010000000000000bbd8249d1a2699ad8237a8e84a3acb7a556834256f0100ec0169ba0971d6577c3e2be0e7a7b231b4860664dd09c7e3ef49b3bf51691cc3a524"], 0x24}}, 0x800) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x1, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r5) 04:36:39 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) socketpair(0x5, 0x5, 0x7f, &(0x7f0000000000)) 04:36:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x6) [ 448.349624] input: syz1 as /devices/virtual/input/input439 04:36:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r4, 0x4}, 0x8) 04:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x12000000]}, 0x45c) 04:36:39 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 448.610074] input: syz1 as /devices/virtual/input/input441 04:36:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x6) [ 448.656226] input: syz1 as /devices/virtual/input/input442 04:36:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0xfffeffff, 0x4) close(r1) 04:36:39 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40055}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x3ff, 0x0, 0xdf95}}) r3 = accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xfffffffffffffffa) dup(r3) 04:36:39 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x284002) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000040)=""/204, 0xcc, &(0x7f00000001c0)=""/104, 0x2, 0x6}}, 0x48) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:39 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x14000000]}, 0x45c) 04:36:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x6) [ 448.977845] input: syz1 as /devices/virtual/input/input443 [ 449.035816] input: syz1 as /devices/virtual/input/input444 04:36:40 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x15000000]}, 0x45c) 04:36:40 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'sit0\x00', 0x800}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xc2040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x30, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 04:36:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x5, 0x50424752, 0x2, @discrete={0xef, 0x8}}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r3) 04:36:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2c0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1a4, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1e98ffc}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffd33}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x765}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x1a4}}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000040)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 449.239786] input: syz1 as /devices/virtual/input/input445 04:36:40 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x16000000]}, 0x45c) 04:36:40 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000000)={{0x8, 0x4}, 'port0\x00', 0x40, 0x30000, 0xfffffff8, 0x8000, 0x100, 0x80, 0x14, 0x0, 0x5}) [ 449.496290] input: syz1 as /devices/virtual/input/input447 04:36:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0xfffeffff, 0x4) close(r1) [ 449.548036] input: syz1 as /devices/virtual/input/input448 04:36:40 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1f000000]}, 0x45c) 04:36:40 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) close(r0) 04:36:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r4, 0x3ff) 04:36:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = dup3(r4, r3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="977fe3b07140ef8a119c3334ac9f00720c0b9cb0c6df3b599e5e99f1c1afa92b49063e32d3d0ff518d0194d6a746ffce7cd62edfc4c8c4987af6516bc5de1b451b530bf0445eaeacbff3f6976ee6cf6e722729c4889c573e25da5aae082b927ad6ecab1fc6d1e3712c97269f1f9c19e48fc7735bbe1f54e67c15e48613dc9609fd4f9653cc49b37d63378dfea905d14985be76b14717c98c61c63889dbd73df5f19b66abc7fbedcbf8531306f795f3ce09bb4a637d92a92028afc4e07de94da2f82df983b59310b3f9e8e4091480f3949e1e8b4c07171bf69b390d04ccff8c9ebfd18d983f8afde464", 0xe9) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r11, r10, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r13, r12, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0205647, &(0x7f0000000280)={0x0, 0x8, 0x3, r4, 0x0, &(0x7f0000000240)={0x9c090c, 0x40, [], @ptr=0x6}}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r14}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r16 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r16, r15, 0x0) ioctl$KVM_GET_ONE_REG(r15, 0x4010aeab, &(0x7f0000000100)={0x7ff, 0x7d3}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 449.793262] input: syz1 as /devices/virtual/input/input449 04:36:40 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) [ 449.986687] input: syz1 as /devices/virtual/input/input451 04:36:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)=0x240) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xcb4}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r5) 04:36:41 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:41 executing program 5: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0xfe, 0x2}, {0x21, 0x40}, 0x3, 0x2, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = syz_open_procfs(r2, &(0x7f0000000400)='net/ip6_flowlabel\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0xffff}, 0xb) dup3(r4, r3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0xca4c1) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r5) close(r1) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/177, 0xb1, 0x10000, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) 04:36:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) 04:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x45c) [ 450.269198] input: syz1 as /devices/virtual/input/input453 04:36:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x26) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 450.354107] input: syz1 as /devices/virtual/input/input454 04:36:41 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3]}, 0x45c) 04:36:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:41 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) [ 450.506722] input: syz1 as /devices/virtual/input/input455 04:36:41 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x280, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x977812c2e3feb5ce}) close(r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2100, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000ffdbdf250000000005001300030000000500060007000000140008006272696467653000000000000000000008001100010000000c000f00800000000000000005000701020000000800110001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 04:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x4]}, 0x45c) 04:36:41 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 450.726006] input: syz1 as /devices/virtual/input/input457 04:36:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000300)="7f987d52b972445fecda5c5a2a2e78336946da3890f87f3256787bec98af347cbc2ba53f681d99d5552c46b4f00f9e23a2e6cd6d9096650cf454be402b464f007ce45a66c1bb210cc65d67ed560f39becad01905378e32fc64d55bbbba821a2617692113c25a50869849f6c4721307146ffb337b24138bac4a0af58356c817e9e6706aeb28ceda51f7ba47b603341165454844de4b8d9d42e484204bce373fbe06f8938246a7dca3329fdd75fbf3cf812ff4c9dfb497e60c95ce570240ae2800769616a09c398d50f76f9ed514607788b1f4cc0ee8a3bf9e569f2d163257a57f0602dc7cc2cb93428604dba7", 0xec, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000240)={r5}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) getrandom(&(0x7f0000000040)=""/134, 0x86, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4020, 0x0) 04:36:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x5]}, 0x45c) 04:36:41 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x48966, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7ff}, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(0xffffffffffffffff) 04:36:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'ip6erspan0\x00', {}, 0x80}) r2 = eventfd2(0x6, 0x801) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000100)=0x5) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) [ 450.939185] input: syz1 as /devices/virtual/input/input459 [ 451.030812] input: syz1 as /devices/virtual/input/input460 04:36:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000200)=0x78) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4000, 0xfff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) setresuid(r3, r4, r6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x2}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x11]}, 0x45c) 04:36:42 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 451.249522] input: syz1 as /devices/virtual/input/input461 [ 451.341199] input: syz1 as /devices/virtual/input/input462 04:36:42 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:42 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) 04:36:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x12]}, 0x45c) [ 451.536836] input: syz1 as /devices/virtual/input/input463 04:36:42 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) 04:36:42 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000240)=0x3) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xffff, 0x2, 0x2, 0x4, 0x2}, 0x20) socketpair(0x10, 0x6, 0xff, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r5, 0xb0343aabd1184b87}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x70, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x4000002) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r11) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x2c, @multicast1, 0x4e24, 0x4, 'lblcr\x00', 0x10, 0x0, 0x3}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = dup3(r6, r5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r8, 0x4) connect$netrom(r7, &(0x7f0000000300)={{0x3, @null, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r2) 04:36:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x14]}, 0x45c) [ 451.783775] input: syz1 as /devices/virtual/input/input465 [ 451.793336] device batadv0 entered promiscuous mode [ 451.849651] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 451.857659] input: syz1 as /devices/virtual/input/input466 [ 451.909149] device batadv0 left promiscuous mode 04:36:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x15]}, 0x45c) 04:36:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000240)=0x3) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="5d82255abc863acecaf4b67f7ee3240354f5b39f4e1103ee6c7fa36dc230f5b31f4233739bd077ba1779d69ad5da4ea20f2e3c37b0aa359066a75fb57dae1b6051fb0311163cba6b3e07b9df195336eb95eda9e89d0a2ec44ac49c75eb62eb01c3e8c1d8e267856d56cfb07811a9463fb71153c5d2ff3d7dc93b08b0274f0739a26e07a7ff1dd6432c557985a5232c1a8d8eb040ee59e38610917158c53cf8bad8a0eeaa14e142612cfbccb0bfe3a2f107b01ac6548cb0baf19c74e699aee634f508cfc48d79bbd077086d7e4940b60bdc75098394663c108c9114ad4118d47360f760730ded1b83d9bd391d1fc8ffe31a94ff09dd23884e49c61e7bae74a619fb0ee6a881623a230aa3f5ad9c07b1df7ba10e814f24d1fef16f02acdeb90df3012cabf027e8c1a6a88eb9dcf2feda982da20b21347090445cff904a8f8685281ce9db288177af4cebc2397c9e02a0b30621186219e6cff9b2b7204edb6bbf575ea2b26aab1dad66c80b68829762789ab9ee966750a2fae76ffa1fc90180809644490734601c0c8d83329dabe80f549f2012e85eef6d66345843131b4cc197a6293960decaf21c33636c333b4e1a4390b2af4956e5cb2d727c5e471abf5e8cf52d9a1fd963818e70c3c1bd0ecfa4d6a9c6bfd55789a425a020317cb8bb4b4c7590dcc58bd40b49905278363c94daf21039a207d1a6d67da5f4e7651f0bfa4de36484634cca559a944298e3fc1e0d9840b72a4a834b0f0864029dbe3de4fca978d973dee014fb1f37b907402cfc3386c451f7664dfc30a28411b18a16b39bfc13fb8aa6d9018ec1baa89dd351af3622ca3076e64b1f73a2bf304b05dfeec622fd362c7bd4e953b499ed68369f31006e134c1241007bae0c1ae56b792bb38d1597dced623237c75c11614694f4a34f2390c58080b7df95ad7235e2e81b5a0470a59a2423ff9baad8a53c11232c6f82ad2c94d322fee9f8b767f8ffe11f9e3a1b077873872cbd6b3883412cd758c4059e43068160f2d8a1ff58abcb71e45ed6de7918cd66d47560e751f59ab622dbe765da03411db4e4b7915a22c3d0fb788d94cbb0274d1bb2e837a9a0c0972502aeec55947e4ab8d87b108b31b77f7cab05418e4887efd7fc06df806d6f1c087d9b0885ede3f67246510bacc8cdb48244d0a7e6bbb16b743b17b37c414acea9dfb37f16a8fb9483fc8add0b80c61882c5564f1ed9161e67ad5997ad6325f8a2e7a0a69d9f44adcaf8ba51a609ef1514593ff3703ff80269e93c55b4a89e476b2a8d25423ae70e96a2c70bb911f291247b28784079a1a8012e8ee298356f5f861dfab876c7b2863de56ba38b5c5d5fff972eda0bcf463dcd1b975f7f726081788117d4d5f60fdbd7cfb753a87e61f5d8d9459ce28c0eb6c00fe52e828a49775af4b375fe8b002c5541dc95409508b503e3728e8f"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000000)="0674eb5a2c1ecf8b457af9ddc48438dd0dde0005caf6b8f65895cd1316ecf40d7b49535504e88089d2d662a47db08d2139b491ba6a7e78b477a83b0df44499e58b1a98f71f76001430c43e10757d5088191f5e12e374e511ef513759ad0c469d70f7cf105725daa6bb", 0x69}) [ 452.065340] input: syz1 as /devices/virtual/input/input467 [ 452.105656] device batadv0 entered promiscuous mode [ 452.160826] input: syz1 as /devices/virtual/input/input468 [ 452.174680] lo: Cannot use loopback or non-ethernet device as HSR slave. 04:36:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x16]}, 0x45c) [ 452.239476] device batadv0 left promiscuous mode 04:36:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000240)=0x3) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:43 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0xa0400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xc0800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x60, r2, 0x400, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="87dcc562c3840a8b7ff89bec4cf3dcfb"}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x35}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 452.393482] input: syz1 as /devices/virtual/input/input469 04:36:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) setresuid(r2, r4, 0xee01) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) 04:36:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x300]}, 0x45c) 04:36:43 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40003, 0x40) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x40000, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000200)=""/81) close(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000000)={{0xb9, 0x9}, 'port0\x00', 0x8, 0x121000, 0x8, 0x1, 0x1f, 0x6, 0x10171e73, 0x0, 0x4, 0x84}) [ 452.686318] input: syz1 as /devices/virtual/input/input471 04:36:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x500]}, 0x45c) 04:36:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 453.003974] input: syz1 as /devices/virtual/input/input473 04:36:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) read$usbmon(r2, &(0x7f0000000300)=""/199, 0xc7) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 453.100950] input: syz1 as /devices/virtual/input/input474 04:36:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="5d82255abc863acecaf4b67f7ee3240354f5b39f4e1103ee6c7fa36dc230f5b31f4233739bd077ba1779d69ad5da4ea20f2e3c37b0aa359066a75fb57dae1b6051fb0311163cba6b3e07b9df195336eb95eda9e89d0a2ec44ac49c75eb62eb01c3e8c1d8e267856d56cfb07811a9463fb71153c5d2ff3d7dc93b08b0274f0739a26e07a7ff1dd6432c557985a5232c1a8d8eb040ee59e38610917158c53cf8bad8a0eeaa14e142612cfbccb0bfe3a2f107b01ac6548cb0baf19c74e699aee634f508cfc48d79bbd077086d7e4940b60bdc75098394663c108c9114ad4118d47360f760730ded1b83d9bd391d1fc8ffe31a94ff09dd23884e49c61e7bae74a619fb0ee6a881623a230aa3f5ad9c07b1df7ba10e814f24d1fef16f02acdeb90df3012cabf027e8c1a6a88eb9dcf2feda982da20b21347090445cff904a8f8685281ce9db288177af4cebc2397c9e02a0b30621186219e6cff9b2b7204edb6bbf575ea2b26aab1dad66c80b68829762789ab9ee966750a2fae76ffa1fc90180809644490734601c0c8d83329dabe80f549f2012e85eef6d66345843131b4cc197a6293960decaf21c33636c333b4e1a4390b2af4956e5cb2d727c5e471abf5e8cf52d9a1fd963818e70c3c1bd0ecfa4d6a9c6bfd55789a425a020317cb8bb4b4c7590dcc58bd40b49905278363c94daf21039a207d1a6d67da5f4e7651f0bfa4de36484634cca559a944298e3fc1e0d9840b72a4a834b0f0864029dbe3de4fca978d973dee014fb1f37b907402cfc3386c451f7664dfc30a28411b18a16b39bfc13fb8aa6d9018ec1baa89dd351af3622ca3076e64b1f73a2bf304b05dfeec622fd362c7bd4e953b499ed68369f31006e134c1241007bae0c1ae56b792bb38d1597dced623237c75c11614694f4a34f2390c58080b7df95ad7235e2e81b5a0470a59a2423ff9baad8a53c11232c6f82ad2c94d322fee9f8b767f8ffe11f9e3a1b077873872cbd6b3883412cd758c4059e43068160f2d8a1ff58abcb71e45ed6de7918cd66d47560e751f59ab622dbe765da03411db4e4b7915a22c3d0fb788d94cbb0274d1bb2e837a9a0c0972502aeec55947e4ab8d87b108b31b77f7cab05418e4887efd7fc06df806d6f1c087d9b0885ede3f67246510bacc8cdb48244d0a7e6bbb16b743b17b37c414acea9dfb37f16a8fb9483fc8add0b80c61882c5564f1ed9161e67ad5997ad6325f8a2e7a0a69d9f44adcaf8ba51a609ef1514593ff3703ff80269e93c55b4a89e476b2a8d25423ae70e96a2c70bb911f291247b28784079a1a8012e8ee298356f5f861dfab876c7b2863de56ba38b5c5d5fff972eda0bcf463dcd1b975f7f726081788117d4d5f60fdbd7cfb753a87e61f5d8d9459ce28c0eb6c00fe52e828a49775af4b375fe8b002c5541dc95409508b503e3728e8f"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:44 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:44 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb882}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x2}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x204, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x500, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xd84f785a2ff4ab70}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7e4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x481f32d8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x278}, 0x1, 0x0, 0x0, 0x20000810}, 0x4040000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) getpeername$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x20) close(r0) 04:36:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1100]}, 0x45c) 04:36:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x3, 0x152, &(0x7f0000000540)="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"}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) [ 453.455869] input: syz1 as /devices/virtual/input/input475 04:36:44 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 453.561437] input: syz1 as /devices/virtual/input/input476 04:36:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1200]}, 0x45c) 04:36:44 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:44 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x4, 0x0, r1, 0x0, &(0x7f0000000040)={0x9909e0, 0x16, [], @p_u32=&(0x7f0000000000)=0xfffffff9}}) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x40000) close(r0) [ 453.782737] input: syz1 as /devices/virtual/input/input477 04:36:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r4, 0x0, 0x8000, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000740)={0x4}) kcmp(r6, 0x0, 0x2, r4, r3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r6}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) setgroups(0x2, &(0x7f0000000100)=[r1, r8]) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x1000}, 0xc) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1400]}, 0x45c) 04:36:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) exit(0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:45 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:45 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x0, 0xe8}) 04:36:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x15, 0x7, 0x1, "b385e5417c4e5cded2af7389cc035b08"}, 0x15, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(r7, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000140)={0x9, 0x5, &(0x7f0000000080)=[0x5, 0x8, 0x7f, 0x4, 0x3b1e], &(0x7f00000000c0)=[0xff, 0x4], &(0x7f0000000100)=[0x2, 0x1, 0x400, 0x1, 0x71, 0x0, 0x2, 0x4]}) dup3(r4, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 454.317312] input: syz1 as /devices/virtual/input/input479 04:36:45 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 454.416656] input: syz1 as /devices/virtual/input/input480 04:36:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1500]}, 0x45c) 04:36:45 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x231, 0x10000) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x8, 0x9, 0x2, 0x1c, 0x8, 0x3, 0x200, 0x4, 0x1}}, 0x43) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) [ 454.655687] input: syz1 as /devices/virtual/input/input481 04:36:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 454.761404] input: syz1 as /devices/virtual/input/input482 04:36:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1600]}, 0x45c) 04:36:46 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:46 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth0_to_bond\x00', 0xd717d43fc1c81807}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x3ff, 0x0, 0x1ff, 0x9, 0x6, 0x22, 0x17, "82f6c2661ca0de94cc8a4a4227dd69d59b1bbaa8", "222e9b3efaec283c779f57c7266c67a620e69dc1"}) 04:36:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000200)=0x80000001) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x841) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r5) 04:36:46 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 455.560632] input: syz1 as /devices/virtual/input/input483 04:36:46 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x3c800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1f00]}, 0x45c) 04:36:46 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) [ 455.809266] input: syz1 as /devices/virtual/input/input485 04:36:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000080)=0x6a27cbaf) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r5, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0700260083ee8330efa1464c7f75dc11bfea330000000084f6875b37331a9e9acd91d37cca31402c6953"], 0x2e) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r6 = eventfd(0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0x0) 04:36:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:46 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x3f, 0x4, 0x20}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) write$nbd(r1, &(0x7f00000001c0)={0x67446698, 0x1, 0x0, 0x4, 0x3, "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"}, 0x1010) close(r0) [ 455.870163] input: syz1 as /devices/virtual/input/input486 04:36:46 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 04:36:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) 04:36:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1000000]}, 0x45c) 04:36:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) [ 456.086675] input: syz1 as /devices/virtual/input/input487 04:36:47 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 456.171451] input: syz1 as /devices/virtual/input/input488 04:36:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 04:36:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2000000]}, 0x45c) 04:36:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, @bcast, @netrom={'nr', 0x0}, 0x8, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/132, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xa800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x12}) r5 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x400, 0x8e000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) r10 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) creat(&(0x7f0000000200)='./file0\x00', 0x5a) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000240)={0xff}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r7, @ANYBLOB="050006000059d90048000200", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={r11, 0x1, 0x6, @random="ffec5f06bbac"}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r13, r12, 0x0) connect$nfc_raw(r12, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x5}, 0x10) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r14, 0x2, r1) close(r4) 04:36:47 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"}) [ 456.426240] input: syz1 as /devices/virtual/input/input489 [ 456.521559] input: syz1 as /devices/virtual/input/input490 04:36:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x88000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b4e, 0x0, @perf_config_ext={0x4}, 0x200, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r7, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r10, r9, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000600)={0x5, 0x815f19c071f47869, 0xfa00, {&(0x7f0000000640), r8, 0x1}}, 0x18) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r13, r12, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000200)={0x8, {{0x2, 0x4e22, @remote}}}, 0x88) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r14, r11, 0x0) ioctl$ASHMEM_GET_NAME(r11, 0x81007702, &(0x7f0000000300)=""/249) close(r1) 04:36:47 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 456.570659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:36:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r1, 0x4dfa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 456.628499] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 04:36:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3000000]}, 0x45c) 04:36:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) [ 456.777089] input: syz1 as /devices/virtual/input/input491 04:36:47 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 456.843591] input: syz1 as /devices/virtual/input/input492 [ 456.897401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:36:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x4000000]}, 0x45c) [ 456.946993] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 456.994946] input: syz1 as /devices/virtual/input/input493 04:36:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x70c, 0x4}, 0x1080a, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) fcntl$setlease(r1, 0x400, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x355669e4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000200)={0x9, 0x2a, 0x4, 0x8000, 0x1, [0x8000, 0xbe1, 0x7, 0x64], [0x0, 0x7, 0x54e, 0x6], [0x40, 0x8e3, 0x1ff, 0x7f], [0x401, 0x95, 0x5, 0x2]}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @loopback}, @ipx={0x4, 0x8000, 0x9, "3b1babb32a14", 0x2}, @ax25={0x3, @default, 0x1}, 0x1000, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000000)='veth1_macvtap\x00', 0x0, 0x2, 0x8000}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x3f, 0x83, 0x1, 0x7, 0x0, 0x3, 0x5be, 0xe841}, &(0x7f0000000280)=0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r8, r7, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0xfffffc01, 0x1, 0x2, "8f05f77fd638c344d8c006f145ba45cdfa9c735ad5cd5785037391d64690d175", 0x7c021532}) socket$unix(0x1, 0x1, 0x0) 04:36:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x5000000]}, 0x45c) 04:36:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000040)={&(0x7f0000000000)="75a7daa2d69c", 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) 04:36:48 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:48 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) read$usbmon(r2, &(0x7f0000000300)=""/199, 0xc7) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) [ 457.278758] input: syz1 as /devices/virtual/input/input495 [ 457.328688] input: syz1 as /devices/virtual/input/input496 04:36:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x2, @remote}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x11000000]}, 0x45c) 04:36:48 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000240)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x180000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 457.584983] input: syz1 as /devices/virtual/input/input497 04:36:48 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 457.681850] input: syz1 as /devices/virtual/input/input498 04:36:48 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r5, 0x0, 0x8000, 0x2) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000740)={0x4}) kcmp(r7, 0x0, 0x2, r5, r4) getsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r7}, {}, 0x7f2b15d7, 0x3}) perf_event_open(0x0, r7, 0x1000000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x12000000]}, 0x45c) 04:36:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xe30f, 0x5, 0x8, 0x8, 0x9}, 0x14) 04:36:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[0x1000, 0x1000, 0x4000, 0x5000], 0xfffffffffffffffe, 0x14, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1f, 0x7, 0x193, &(0x7f0000000300)}) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r6 = signalfd(r1, &(0x7f0000000080)={[0x8]}, 0x8) read(r6, &(0x7f0000000700)=""/201, 0xc9) close(r1) [ 458.030713] input: syz1 as /devices/virtual/input/input499 [ 458.081526] input: syz1 as /devices/virtual/input/input500 04:36:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:49 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) read$usbmon(r2, &(0x7f0000000300)=""/199, 0xc7) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x14000000]}, 0x45c) 04:36:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:49 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x206000, 0x122) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x8090) close(r0) [ 458.298629] input: syz1 as /devices/virtual/input/input501 04:36:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001880)={{0x33, @loopback, 0x4e22, 0x3, 'lblc\x00', 0x2d, 0x7, 0x32}, {@multicast1, 0x4e23, 0x3, 0xffff, 0xffffffff, 0x7}}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x9, &(0x7f0000001700)=[{&(0x7f0000000080)="ace38db69c1c3717879b9d51c3564f3af1143b0a2c54ba5faf3c1da39373952aeb3639359076a9e039", 0x29, 0xfffffffffffffffb}, {&(0x7f00000000c0)="5c79648e87d0f97493db90e6e8a4029050c7279eb09e1000617a9322ca95195f6c60494145a7e331d8c330eef3f262f349c065225074f8201b473a9119ebdb45932dc481381e0fec4216d131fba843583930ac8b4e97748952aaf12f2924d868163adeedc18aff2b319f66c6c99b7923efe224e368b9d40a7114ebe9834554637e0bad0095c2ffa7", 0x88, 0x3}, {&(0x7f0000000200)="80a4abb004b12f96c20fe12d0ae048de35f704aaee1f94840a23091904ec015ac221807d83ab48", 0x27, 0x3}, {&(0x7f0000000300)="efa9e564e7771dc4e2aef66d2a4ba01db9286de5cc09ae30ed7b4d027678d4d55cdd5eb619be1682fbdc4d2cab3ba06e73d4154fc88a169b61f8aec8f73d7bb3181a870bedf492067a1001fd33e7d84cad9c6153e04f5984e6a8e7035ce7d2a109892a3b42eae7d0732a3b2192fde672e75d8fabde6b66f8fe5af77adf0be89d5c21fe69a352b6680bfa7ffc2b8f2b4508f96c956915bbc212e9898929ac014ed586be290e34eedfd4b96089cc8f6551e5fda989fed53150fc464d64acd17670f7daedcfc099effe9556aba7773150345a4b8eabed3db1a4c09726f29cc1485c7780368bc3dcd32a343786377ea8", 0xee, 0xa0e}, {&(0x7f0000000700)="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", 0x1000, 0x90}, {&(0x7f0000000400)="434c4758ad728f0fde43674056fb733a4c7d739bca5ec2aff099d6b36ab3833705a1b94a4be6d10717d4251654c692f91dfc9de8337bb16fca5d0eef5f079025ba32b6c77343510dec27ea1449d3594bc80b0e22189dbfc197c1bd7e34f48a49b39d0dee31b0303c7e9ec7ca91aa80bdb7b12a24f91b4f6efe5a966e72da4f2c451cbb948851087a4d134390f1e87d16449387f8a67e040e5ea457d47e3f8d73135950e88571b23b7d84d347a537c56f75caaf83bc602b5968af43e68ff87dfa96b0874d6631a40e5b3047c69ab930b19089c53744bd939458cc3a", 0xdb}, {&(0x7f0000000240)="0261736af4f4f2c1f61fa918210a7c9afae9efc35218c7711bb5b4dfd2a6f9f6d5e800707914118a921b8b1971a9bae76f1ba32cf7e47d759dd262b497a169f113a7528ad30d85ff02f1c1501c2fe5e962248c4702ee3cc2a63bd7ca617d06c92718f84c937177", 0x67}, {&(0x7f0000000500)="fcf42851c3469ad09e614defb4a32266f98e4a9fce578540317afc8b7b219fe3f5d1b936b880ee5b8905ee09f78d79821a246b59abe5ee1069bf7de44554ed267929214a51c8a16b73f5107a976cfcb7820347eead981b13aa3f912d43a38ab572b8befb3a34e8337044d9c7c5e5aff56579ce8ad99fca79afef8a217b67b5dca00b68d5f295533191f794ea61c930d14953704f10fbb92adc5697a215eafec5852deb11bab378f51b3f4a1b275dfa7acd7d1ec54d99ec0eb054d39cc0ca4b3a65e054590f5ef959", 0xc8, 0x3}, {&(0x7f0000000600)="b36d4829839179c22e8db3a9cd61357038ce776ee65c0563257ced2bf400c169458f0951d2a3a76602934e58b64facbac69e58f3720312b8c459966f60427d5de814444cd5c35255791405a2a4ea27dd6fe46d2a14fd910775da072d663f", 0x5e, 0x400}], 0x480, &(0x7f0000001800)={[{@usrquota='usrquota'}, {@nobarrier='nobarrier'}, {@inode32='inode32'}, {@logbsize={'logbsize', 0x3d, [0x74]}}, {@logdev={'logdev', 0x3d, './file0'}}, {@pquota='pquota'}], [{@dont_hash='dont_hash'}, {@dont_appraise='dont_appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}) 04:36:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 458.431124] input: syz1 as /devices/virtual/input/input502 04:36:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x10980, 0x0) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$unix(r5, &(0x7f0000000d80)=[{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="e1029905ada814fd91535c431588a7b3db1c311c1642675dfeef1ecade1f414b7c1a16c33306eb355d8015a5ae24ec000f978fec799c45f98cbce64fb943c6f0e04edec1af9164db50943676ee5a0b77acb7b380bfb03f207c113db9a979ef0b", 0x60}, {&(0x7f0000000440)="114020f4d9fa141caf1f12baf853ad76fe00b4b81e9d531d01", 0x19}, {&(0x7f0000000480)="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", 0xfa}], 0x3, 0x0, 0x0, 0x44811}, {&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="0ed5d2f767e497fffd3498ab2c38a8cce570e42b5bd987e2a79b6501ef8b5eaea353c5734f55c498e662bfc60f18a155cf1e5070eb093b22f5ac998e4fdc", 0x3e}, {&(0x7f0000000680)="31044efc71ffae606f0da86efac4c2d9a403c0e69c1fe553ff9ff39260fecbf0208babf0ba3af695f7a7da99e7de69f8ed1dea9ce05644eb174b32bc37e2e529bf56034c4e17ecfa8e0f8247dca4fe7176e8f2115f98e69f61c4a6df337305c943dfedd1dfe6fcb158146a0619b47f41844d794eca7581f28586e10902df57aa9a0f320a6d1732bc2b8c22ea78845b5bc81d007955e4230e9b87587215f186243003f8b30cec1aa67d55f4c062775e52b0239fd0", 0xb4}], 0x2, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [r7, r8, r1]}}], 0x20, 0x4}, {&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000980)="97982e386a6452d7c2e175ca5f1c591d5df542e12de96c5bd94431fd80001a76e247f5a10b9484baaae6c99232143de680d174f1e11584e99ef6e80fb7051fafb0258875e32c43c828e64615cc207d16ff1207f616227470b314dd991d618fb94714efe4d31d1b9b02839ed1935bf1bcda6e127eaa180f37046cc2186d73adad54f942569f8dc48fc77e716461cacdb787b32f8526d6f71f9fe1e2a93303fee791d5eb7cc0a57a42a9ede8cc31107a844534bc50b6afa3df277fd700308fbdcf4beafc540ea495d5e83065aaa3e8725c0e0c281842e02a1353f44921cb70cfb4933b5c1ff94c89a5291ae30edf98492a", 0xf0}, {&(0x7f0000000a80)="e63779db10e4fe64362bf91c7669a11f60fb88321a4be8c920514e5f205432a52a06cf83617e56c3cb3f785b67f330ecaac6c4e96a8f72ef5d3529cc00e6c772517b92772b550fe7b91d91c3e0394544c447a5ad6a4c5ebdf728585befcd0095747e1f4f3874c27496f1726c32470461046816d0d5dfc0bd4b94e123695d4bd4d681f2036e9ba17730329127e2dc65190338e40ea52fab465c004cdca59a72e4de37f5d2afa713b02d9c44b0f676deb77bd43dc2f2adaf642a86d802", 0xbc}, {&(0x7f0000000b40)="c8fddb588b1aa36e94c7ffa41544c825218d309cac54383ceade1ae40ffe5399634b1f8426875a6e126eac83401cf71e3f32855a12e73ee016339a4fcc2b7db03cd674de6f9741b0735624d01f6d5acebf6ff32393818e3af32599a2586f278c40f0ad60e813c850ef7070ba02155b307969db54f454af4668", 0x79}, {&(0x7f0000000bc0)="391265d408492bbb9c095b9d04afa61df1aba04fff4b22531a0d8b0f123cc6aac7a67d2c9d1ca717c7df2253bc46fc1a48f287fb39ffd8d1f6121aea8dd4b34b90c92789e58eedd471aa1911bd3d4cae5705b053ecdf6b05adad556434aa456f78a7b45157fb18bdcead9b18bb", 0x6d}, {&(0x7f0000000c40)="fc8cca23e7c70b7abdfb96ed287d4e1a5ab0087ed4ce9d49ae75078b48818c", 0x1f}, {&(0x7f0000000c80)="844e5e9b1bf7f38e9d41402823f160efb3daa3cca540d4b0c0fb555751c89164f895f002d9e314ed06ccd374397a3ac8d026a365087d7ab2c821894a3799375e00682dfc7bef20198429", 0x4a}], 0x6}], 0x3, 0x20000004) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4142, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc6f, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r10) [ 458.495510] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 04:36:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x15000000]}, 0x45c) 04:36:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x20000045) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x9) close(r1) [ 458.644497] XFS (loop4): unknown mount option [nobarrier]. [ 458.682843] input: syz1 as /devices/virtual/input/input503 [ 458.723378] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 458.758871] input: syz1 as /devices/virtual/input/input504 [ 458.774476] XFS (loop4): unknown mount option [nobarrier]. 04:36:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x16000000]}, 0x45c) [ 459.057021] input: syz1 as /devices/virtual/input/input505 [ 459.120245] input: syz1 as /devices/virtual/input/input506 04:36:50 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x206000, 0x122) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x8090) close(r0) 04:36:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd4, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e4d6eee}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8004}, 0x80) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x10001, 0x115240) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x2, 0x4b39, {r2, r3/1000+10000}, {0x5, 0xc, 0x0, 0x3, 0x40, 0x3, "479d8d98"}, 0x3, 0x2, @offset=0xfff, 0x10000, 0x0, r0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000200)={0x6, {{0x2, 0x4e20, @rand_addr=0x420}}}, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r7, r6, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6560000000b7f061971513405ea803a4b4950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r10, 0x0, 0x8000, 0x2) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r11, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000740)={0x4}) kcmp(r12, 0x0, 0x2, r10, r9) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r12}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r13, @ANYBLOB=',group_id=', @ANYRESDEC=r14, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) getresuid(&(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000340)=0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r17, 0x5423, &(0x7f00000000c0)=0x3) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="6560007189931f0ab83e643847b500"/29], 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$TIOCMSET(r17, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r18, 0x0, 0x8000, 0x2) r19 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r19, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r19, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r19, 0x3, r18, &(0x7f0000000740)={0x4}) kcmp(r20, 0x0, 0x2, r18, r17) ioctl$DRM_IOCTL_GET_CLIENT(r16, 0xc0286405, &(0x7f00000000c0)={0x67, 0x5, {r20}, {0x0}, 0x7f2b15d7, 0x3}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="7f2626e991039ac75ea27546638533cfe5e44f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r21, @ANYBLOB=',group_id=', @ANYRESDEC=r22, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB=',subj_user={bdev,smackfstransmute=/dev/kvm\x00,\x00']) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000380)={0x160, 0xfffffffffffffffe, 0x3, [{{0x0, 0x1, 0x7, 0x6, 0x1, 0xe7e9, {0x4, 0xcca2, 0x1ff, 0xfffffffffffffffb, 0x9, 0x8, 0x3, 0xff, 0x2, 0x9, 0x1000, 0xee00, r14, 0xa0000000, 0x2}}, {0x5, 0x5060, 0xa, 0x550, 'net/snmp6\x00'}}, {{0x0, 0x0, 0x5, 0x1, 0x3, 0x7ff, {0x6, 0x0, 0x1000, 0x4bec, 0x80, 0x6, 0x6, 0x8, 0x0, 0x3, 0x5, r15, r22, 0x2, 0x6}}, {0x2, 0x1, 0xa, 0x6, 'net/snmp6\x00'}}]}, 0x160) 04:36:50 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x280e01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x1f, 0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:50 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x1f000000]}, 0x45c) [ 459.323114] input: syz1 as /devices/virtual/input/input507 04:36:50 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) 04:36:50 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = semget(0x1, 0x1, 0x0) semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000540)=""/55) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)="6c2fb94211373627192be5467ac5fa607b95737fe9b52c5bffc765cda131802533fa4215ba889840ebfbc18be7e7dd70ed136cfe5984e3a8d76aca76596924b22338993ebff78455211b38c7b834bfd97549ec1ed954cd18e79f1a25502dffd28c4d9969ac433907fe9ac8a424b0d41991e088402a77032ebb7677541bcc", 0x7e, 0x1}, {&(0x7f00000001c0)="048b3445744d0a9ba25459a63d73eabe2e01d6ce929b12266a715acc192f0a776e17cee25bc174613d45c2011c61506da06a32f124f570ac4106b775f5083015ad88a24f1128a478ae03adbc62d6af7d4a2f79fb38c054b729958a61259374674842f8cd839f650136dcf704432af9ec9379b6935307ba5c7ac0df4fd2332f7a0779e0d506aa57dc9b6c9ef7f331be311b3103e003915eef4f4716878d850731c0907c4a13294de03b2fa9fb8f", 0xad, 0x1}, {&(0x7f0000000300)="d7ab2f69b5bbe38083b32d1e3985f96f6d4a735a0d41efae82eee6129cc503d9e8fbc861ac285f026515a49ba115e2e33b0be951ce8abc09c56544c70659143dc37667c6898793d72488511721d5149185469aa2c7fdabfa4d9c36aab4adbcd9982df497742cd3a6d236ba4c0491751dcf297880a79dd7238af576e9fed465a7fe2648fd33aa2f19fdc8ab9050b1ea1860828fda8405c1901cfcf9428332a81afef64db2822cd39949f9b54c271324631f5b2b52c33c760aa0badb9007d768e9494bdcf4a54e66b08263147018a550ece84880", 0xd3, 0xe6de}, {&(0x7f0000000400)="9b5eeb660e47fbf94c3d4ec9faf90e2e28228bdc85c62bf5fbb8d7cf03050e11f4e2fbbd706f70f24069c26a60c2ecc428ec83a666b0e15871e448b3f8650470e5b053b261b1098bae1e68c4ff1e48c4df2fbf2e758e5b0da3f476e5ff5ac8fd14a94909ad1bd2f4beb64bdb20cc5f474510fe4e5e4ea4f975a74423e2d6facaac7f5bfba004c67a21e3938b5b2d2f0aced71260e528574da11c93f00f0f191d781437f579a67f7a2925bcf3a2b92205d3", 0xb1, 0x3}, {&(0x7f0000000100)="3b0fa23ef322937e6c608fb59e5b3aa7139c90a8a9fecdb8781c670892ef06dbd2100c33b7e44dfee1b7ff318195c31d0000010000000000b9c4abbeac1a39674f8301d2d1b5db4a9674e159", 0x4c}], 0x20, &(0x7f0000000280)='/dev/net/tun\xe7') sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 459.411451] input: syz1 as /devices/virtual/input/input508 04:36:50 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) 04:36:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 04:36:50 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r4, 0xe30f, 0x5, 0x8, 0x8, 0x9}, 0x14) 04:36:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r3, r2, 0x0) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) close(r0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x7ff, 0x2, 0x8}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 459.719291] input: syz1 as /devices/virtual/input/input509 04:36:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) [ 459.851302] input: syz1 as /devices/virtual/input/input510 04:36:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 04:36:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x420000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @rand_addr=0x100}, @in6={0xa, 0x4e23, 0x456a, @empty, 0x5}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0xffff, @empty, 0x4a4}, @in={0x2, 0x4e21, @local}], 0x68) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r2) 04:36:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@rand_addr, @rand_addr, @empty}, &(0x7f0000000040)=0xc) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 04:36:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 04:36:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) 04:36:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd4, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e4d6eee}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8004}, 0x80) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x10001, 0x115240) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 04:36:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) [ 460.169274] input: syz1 as /devices/virtual/input/input511 04:36:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "b151475119e30c8c0c8eb71919c685686380ba34eb63a7bed0ab8dfb4026442d35b434069402a982f341cf3f51ec41512533dca20a19dd121d75366a13fff0958c26975e91650964887cac1c12a2038a33ecd3a818870b87c56a70aeb7e6137ac026e0c6ff5c8a163084a01a4ae2045df85cc1b131df922cd31817acafcd68ce1dbeae0fada42a9c4150df33bc7e1095e95c4ca3554509b253362b1ee3ddeab52b556d07edf52fe225a63b884bbb334a85ba90f7610089ed672e1268cc20d9d28d88742944c8614b74ef2707089890a3d9b888690e6d9416a16c55faaaf2c362742a8f552a1f15285f43dd7bcf94e370d1092ecefa5a4896c33b916a155ae4db1940eb87370f4bade15f79e2a56631b7a8103f955f00dfffd590b8dca5c0dfbd8c71dab6a035a9ef122e9923fb9d6acb7329247ddc3296a493036908b2da1f3288c5ea7f2604f0c35ffc33103d3be747994a91159547410200a111cb11a6266c5f3fb840aae2e4e5af294e1e4547d86635d30be7e5db0686a8d1639afb1556fbb0db441e508452b8bf4ebcf07be1460cdd26598356ab4e77fb9207adbb92ad273b1029c0cf5537dde60260f1e59391f6dec9a07d0384869f5d481acafbb61244fb05a3f9fed5ece41986fe9ead4619b69612c0513623c967156aa71e5f9d66a3bac5ac95e457c0ea1a8aeddecd805467e024b8b08edfb1cf92ddbb91f278d0f1"}) 04:36:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 04:36:51 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) ioctl$TIOCEXCL(r0, 0x540c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x2c, @multicast1, 0x4e24, 0x4, 'lblcr\x00', 0x10, 0x0, 0x3}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = dup3(r6, r5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r9, r8, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r8, 0x4) connect$netrom(r7, &(0x7f0000000300)={{0x3, @null, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r2) 04:36:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x0, "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"}) [ 460.398598] input: syz1 as /devices/virtual/input/input513 04:36:51 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) 04:36:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r2, r1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={{0x2, 0x0, @descriptor="f2891dc8d3671154"}}) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x230800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000040)=""/166, &(0x7f0000000100)=0xa6) [ 460.501382] input: syz1 as /devices/virtual/input/input514 04:36:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f7200696e736d6f645f65780600000000000000726f6f7400"], 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r5, r4, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000000)={0x10001, 0x80000000, 0x4, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'macvtap0\x00', 0x12}) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r6) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x3bc, 0x3, 0x1, 0x201, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0xa}, [@generic="2c9d4f09d9b40d23f06f58a9281f23e5ae5e5d09380682ac3db03d53b77e55d7b8ee524a70ffd576e39b1493e0c7420aa209234bcd2b442b456f52e03aa6dc0e3fe41a5ecbec897bac40c53384b30a471e0474a793e91cb7a15d062496ae5ed7c3761da0bd6199d5e81ea72adcd299818a7746af0c", @typed={0x14, 0x91, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x34}}, @typed={0x44, 0x19, 0x0, 0x0, @binary="415921953f5786157c926c70f6bd6e95f9e126df35cd82d8f620fee6f7839604dd98e684b0fc7c16169e12d97d48e8a733c15527c7bcd4b2d0a16153926e0645"}, @nested={0x1d4, 0x5f, 0x0, 0x1, [@generic="24a885ada5664b61f1ebd80da37d9146eb62526293b78ef2b97aabd89b318450cc8e331fb4ba585a9d55b3e3ea", @generic="9a23af95854110e4c3f85ebc29736eb94fda371a6725ce422a8dd14a67da1227c2530e6030e3e06b8f179dab3e4492fff4c12959d2f3f3084202997b28595deb9deeab12144cb4d4fe8557417037efea2e82f3444fee3c", @typed={0xe, 0x14, 0x0, 0x0, @str='vboxnet0}\x00'}, @generic="850a47d060b05825559be45bcfc8d2fe8f37d52966f0c2b5edd741d86b4dc42c14f4e7f03b8e0f69e98dbe7350cdb9f7c28224aff3fe808b8c262f3efad658c95760351a53602efa3e78e6569e6dfec2a73788aa2bd6d1cf9bbeb94baec914cc3eb2660aa0e4ce83b6da8501369849fdad3967a02f2e96c77114f83f3f3eae75c3e076ca6ff7aa8ab6f3d55c0a1f4901a861be54a4edf8d5c4ad93dd7ab3", @generic="f913e5aa265d74125d8cecd58ad46d3573fc69a58d9d121568998861c539412289794f252fdc512ae89687bab4245f3aebef488e7961c4b877c619776237a0ab129c826df5ddf4226a069fce4127f0b12f30f48c42f3304378849657d7fe0300d59feeb65914731cc10e31d5746004e2b14fb62241eafe0164dac9762d93bf870ae316ef9a7575c035f5464d13e0ae48cc9545f76025bdc7c1513491f18a"]}, @nested={0xfa, 0x77, 0x0, 0x1, [@generic="55371ecc80d0b48b4ba146ad20816156f590b7a9afc06f051d9e65cbddae5d46550d97d4fb49f86ae4ff4947f6f8f307dff78f5f46d5fdb06fbe9213de36c2d5b2535cc7fb7a6c73c1a05505aed95208f1356ab6e51b60c2aaa5660fe76fe9b9173f101dc959a890b3c5656f45c602ae7cf2e31962b5067f89ea230b161aa7b19c94841d30de17e956fd0383c70b0b80b292599faaa0e817b7779c6132a9cefc5b4f4097dd9351b9d653de947a0d88900227cb9656c3ce6c80018ee05ea87f995211600582ce21e82c11c8ff53c3d569212d3c8343aa2a84ec977c8c342661cb826b", @typed={0x8, 0x28, 0x0, 0x0, @fd=r7}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}]}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@remote}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4c080}, 0xa20ac99fe38a79eb) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x3}) 04:36:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 04:36:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xffff, 0x2, 0x2, 0x4, 0x2}, 0x20) socketpair(0x10, 0x6, 0xff, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r5, 0xb0343aabd1184b87}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x70, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x4000002) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) close(r11) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) [ 460.759117] input: syz1 as /devices/virtual/input/input515 04:36:51 executing program 5: socketpair(0x10, 0x3, 0x9, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 460.822060] input: syz1 as /devices/virtual/input/input516 [ 460.834274] device batadv0 entered promiscuous mode 04:36:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0), 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x118002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x1, 0x2, 0x301, 0x0, 0x0, {0x9, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xbcb4efa6325f38c9}, 0x4004) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x12}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r4, r3, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x1) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4640) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r6, r5, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x4008810) socketpair(0x0, 0x0, 0x1f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) close(r1) 04:36:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 460.909858] lo: Cannot use loopback or non-ethernet device as HSR slave. 04:36:51 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1e, "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"}) [ 460.989838] device batadv0 left promiscuous mode [ 461.020666] input: syz1 as /devices/virtual/input/input517 [ 461.077106] FAULT_INJECTION: forcing a failure. [ 461.077106] name failslab, interval 1, probability 0, space 0, times 0 [ 461.077135] CPU: 1 PID: 22353 Comm: syz-executor.0 Not tainted 4.19.104-syzkaller #0 [ 461.077147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.077153] Call Trace: 04:36:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x45c) [ 461.077179] dump_stack+0x197/0x210 [ 461.077205] should_fail.cold+0xa/0x1b [ 461.077231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 461.077253] ? lock_downgrade+0x880/0x880 [ 461.077282] __should_failslab+0x121/0x190 [ 461.077305] should_failslab+0x9/0x14 [ 461.077321] kmem_cache_alloc_trace+0x2cc/0x760 [ 461.077343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.077359] ? ns_capable_common+0x93/0x100 [ 461.077457] vt_do_kdgkb_ioctl+0x79/0xb50 [ 461.077473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.077552] ? security_capable+0x95/0xc0 [ 461.077575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.077590] ? ns_capable_common+0x93/0x100 [ 461.077616] vt_ioctl+0x47e/0x2530 [ 461.077639] ? complete_change_console+0x3a0/0x3a0 [ 461.077654] ? lock_downgrade+0x880/0x880 [ 461.077674] ? kasan_check_read+0x11/0x20 [ 461.077698] ? avc_has_perm_noaudit+0x3b6/0x570 [ 461.077715] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 461.077734] ? tty_jobctrl_ioctl+0x50/0xcd0 [ 461.077751] ? complete_change_console+0x3a0/0x3a0 [ 461.077827] tty_ioctl+0x7f3/0x1510 [ 461.077849] ? tty_vhangup+0x30/0x30 [ 461.077866] ? mark_held_locks+0x100/0x100 [ 461.077886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.077899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.077951] ? cred_has_capability+0x193/0x320 [ 461.077974] ? selinux_ipv4_output+0x50/0x50 [ 461.077988] ? __fget+0x340/0x540 [ 461.078007] ? find_held_lock+0x35/0x130 [ 461.078024] ? __fget+0x340/0x540 [ 461.078047] ? tty_vhangup+0x30/0x30 [ 461.078067] do_vfs_ioctl+0xd5f/0x1380 [ 461.078085] ? selinux_file_ioctl+0x125/0x5d0 [ 461.078104] ? ioctl_preallocate+0x210/0x210 [ 461.078122] ? selinux_file_mprotect+0x620/0x620 [ 461.078137] ? __fget+0x367/0x540 [ 461.078160] ? iterate_fd+0x360/0x360 [ 461.078177] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.078193] ? fput+0x128/0x1a0 [ 461.078218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.078236] ? security_file_ioctl+0x8d/0xc0 [ 461.078257] ksys_ioctl+0xab/0xd0 [ 461.078279] __x64_sys_ioctl+0x73/0xb0 [ 461.078301] do_syscall_64+0xfd/0x620 [ 461.078325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.078337] RIP: 0033:0x45c6c9 [ 461.078353] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.078362] RSP: 002b:00007fc141e15c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.078378] RAX: ffffffffffffffda RBX: 00007fc141e166d4 RCX: 000000000045c6c9 [ 461.078388] RDX: 0000000020000300 RSI: 0000000000004b49 RDI: 0000000000000003 [ 461.078398] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 461.078408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 461.078417] R13: 0000000000000381 R14: 00000000004c5dc6 R15: 0000000000000000 [ 461.140958] input: syz1 as /devices/virtual/input/input518 [ 461.306909] input: syz1 as /devices/virtual/input/input519 [ 461.508471] ================================================================== [ 461.508518] BUG: KASAN: use-after-free in con_shutdown+0x85/0x90 [ 461.508530] Write of size 8 at addr ffff888046c90288 by task syz-executor.4/22321 [ 461.508534] [ 461.508551] CPU: 1 PID: 22321 Comm: syz-executor.4 Not tainted 4.19.104-syzkaller #0 [ 461.508560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.508565] Call Trace: [ 461.508585] dump_stack+0x197/0x210 [ 461.508604] ? con_shutdown+0x85/0x90 [ 461.508624] print_address_description.cold+0x7c/0x20d [ 461.508642] ? con_shutdown+0x85/0x90 [ 461.508658] kasan_report.cold+0x8c/0x2ba [ 461.508674] ? set_palette+0x1c0/0x1c0 [ 461.508694] __asan_report_store8_noabort+0x17/0x20 [ 461.508719] con_shutdown+0x85/0x90 [ 461.508736] release_tty+0xe4/0x4d0 [ 461.508754] tty_release_struct+0x3c/0x50 [ 461.508770] tty_release+0xbcb/0xe90 [ 461.508796] ? tty_release_struct+0x50/0x50 [ 461.508813] __fput+0x2dd/0x8b0 [ 461.508838] ____fput+0x16/0x20 [ 461.508855] task_work_run+0x145/0x1c0 [ 461.508879] exit_to_usermode_loop+0x273/0x2c0 [ 461.508897] do_syscall_64+0x53d/0x620 [ 461.508918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.508930] RIP: 0033:0x416261 [ 461.508946] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 461.508954] RSP: 002b:00007ffe65586230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 461.508969] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416261 [ 461.508978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 461.508987] RBP: 0000000000000001 R08: 0000000050a341ae R09: 0000000050a341b2 [ 461.508997] R10: 00007ffe65586310 R11: 0000000000000293 R12: 000000000076c9a0 [ 461.509006] R13: 000000000076c9a0 R14: 0000000000771250 R15: 000000000076bfd4 [ 461.509030] [ 461.509037] Allocated by task 8694: [ 461.509051] save_stack+0x45/0xd0 [ 461.509065] kasan_kmalloc+0xce/0xf0 [ 461.509078] kmem_cache_alloc_trace+0x152/0x760 [ 461.509167] vc_allocate+0x1f5/0x760 [ 461.509181] con_install+0x52/0x410 [ 461.509194] tty_init_dev+0xf7/0x460 [ 461.509206] tty_open+0x4bf/0xb70 [ 461.509217] chrdev_open+0x245/0x6b0 [ 461.509230] do_dentry_open+0x4c3/0x1210 [ 461.509241] vfs_open+0xa0/0xd0 [ 461.509253] path_openat+0x10d8/0x44a0 [ 461.509265] do_filp_open+0x1a1/0x280 [ 461.509277] do_sys_open+0x3fe/0x550 [ 461.509289] __x64_sys_open+0x7e/0xc0 [ 461.509303] do_syscall_64+0xfd/0x620 [ 461.509321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.509326] [ 461.509332] Freed by task 22354: [ 461.509346] save_stack+0x45/0xd0 [ 461.509359] __kasan_slab_free+0x102/0x150 [ 461.509372] kasan_slab_free+0xe/0x10 [ 461.509384] kfree+0xcf/0x220 [ 461.509399] vt_disallocate_all+0x2bd/0x3e0 [ 461.509413] vt_ioctl+0xc38/0x2530 [ 461.509426] tty_ioctl+0x7f3/0x1510 [ 461.509438] do_vfs_ioctl+0xd5f/0x1380 [ 461.509450] ksys_ioctl+0xab/0xd0 [ 461.509463] __x64_sys_ioctl+0x73/0xb0 [ 461.509477] do_syscall_64+0xfd/0x620 [ 461.509492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.509496] [ 461.509507] The buggy address belongs to the object at ffff888046c90180 [ 461.509507] which belongs to the cache kmalloc-2048 of size 2048 [ 461.509519] The buggy address is located 264 bytes inside of [ 461.509519] 2048-byte region [ffff888046c90180, ffff888046c90980) [ 461.509525] The buggy address belongs to the page: [ 461.509538] page:ffffea00011b2400 count:1 mapcount:0 mapping:ffff88812c31cc40 index:0x0 compound_mapcount: 0 [ 461.509553] flags: 0xfffe0000008100(slab|head) [ 461.509570] raw: 00fffe0000008100 ffffea00011dd308 ffffea00011b6908 ffff88812c31cc40 [ 461.509585] raw: 0000000000000000 ffff888046c90180 0000000100000003 0000000000000000 [ 461.509590] page dumped because: kasan: bad access detected [ 461.509593] [ 461.509596] Memory state around the buggy address: [ 461.509607] ffff888046c90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.509616] ffff888046c90200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.509627] >ffff888046c90280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.509632] ^ [ 461.509642] ffff888046c90300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.509653] ffff888046c90380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.509659] ================================================================== [ 461.509664] Disabling lock debugging due to kernel taint [ 461.517034] Kernel panic - not syncing: panic_on_warn set ... [ 461.517034] [ 461.517054] CPU: 1 PID: 22321 Comm: syz-executor.4 Tainted: G B 4.19.104-syzkaller #0 [ 461.517063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.517067] Call Trace: [ 461.517088] dump_stack+0x197/0x210 [ 461.517107] ? con_shutdown+0x85/0x90 [ 461.517120] panic+0x26a/0x50e [ 461.517133] ? __warn_printk+0xf3/0xf3 [ 461.517149] ? con_shutdown+0x85/0x90 [ 461.517163] ? preempt_schedule+0x4b/0x60 [ 461.517179] ? ___preempt_schedule+0x16/0x18 [ 461.517195] ? trace_hardirqs_on+0x5e/0x220 [ 461.517212] ? con_shutdown+0x85/0x90 [ 461.517228] kasan_end_report+0x47/0x4f [ 461.517243] kasan_report.cold+0xa9/0x2ba [ 461.517258] ? set_palette+0x1c0/0x1c0 [ 461.517282] __asan_report_store8_noabort+0x17/0x20 [ 461.517296] con_shutdown+0x85/0x90 [ 461.517310] release_tty+0xe4/0x4d0 [ 461.517326] tty_release_struct+0x3c/0x50 [ 461.517340] tty_release+0xbcb/0xe90 [ 461.517359] ? tty_release_struct+0x50/0x50 [ 461.517374] __fput+0x2dd/0x8b0 [ 461.517393] ____fput+0x16/0x20 [ 461.517408] task_work_run+0x145/0x1c0 [ 461.517427] exit_to_usermode_loop+0x273/0x2c0 [ 461.517445] do_syscall_64+0x53d/0x620 [ 461.517464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.517475] RIP: 0033:0x416261 [ 461.517490] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 461.517498] RSP: 002b:00007ffe65586230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 461.517512] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416261 [ 461.517520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 461.517529] RBP: 0000000000000001 R08: 0000000050a341ae R09: 0000000050a341b2 [ 461.517538] R10: 00007ffe65586310 R11: 0000000000000293 R12: 000000000076c9a0 [ 461.517547] R13: 000000000076c9a0 R14: 0000000000771250 R15: 000000000076bfd4 [ 461.519821] Kernel Offset: disabled [ 462.154645] Rebooting in 86400 seconds..