00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000dc0)={r1, 0x8001, 0xad, 0x1}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000011c0)={r6, 0x1}) writev(r2, &(0x7f0000000040), 0x0) 22:44:59 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r2, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:44:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (rerun: 32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="f9782ff9dafd083306697fba177882ad9fa45fb812e583b1826cc7375a07070d1ac0f988dda27a8000000000684fe8a643c8027d229c1600becf21a2b1a2cd37977197a8c31201c293f6bb14a954f66cbcc4c05d7a61af6da794af47bbca1b2a939156d158a644cc3fccaffbad750a0000d7396a56395a6e0a6d33bd4dd69bbc8927f693fefd7fba26af70", 0xfffffffffffffe44}, {&(0x7f0000000100)="19ff274b38c9ee038c3e4d880da1f2f16bd9263d8a06ccf07fef109f9b7cd253600094a637705ff2f65d03c004be393295b0dfb29186908e06c5dddf9e7dc52b1a279c", 0x43}], 0x2) (async) r2 = socket(0x1, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x701, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x1, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="d7b60bd128594e301055f74f"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xe6, 0x1a, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7, 0x1, 0x20, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="65727370616e3000000000f1ffffff00", @ANYRES32=0x0, @ANYBLOB="0020008000008000000000554f19007c00650000812f9078ac1414aaac1414bb940401000144445c817f00000100000009ac1414aa00000008e0000001ffffffffac141433000069707f000001000000040000000000000fff00000000000006bce0000001000000080707e8ac141426441446917f000001000010000a0101020002000000000000"]}) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000002c80)={0x4a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "af279c21a2f636f49eb0c347255519b87c991f0726689369c66ca3b0aac5203c69d1cd85d8e30c71"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "cd5e208d188bd3720acd9d4183cf2f1f6b84b223acd216ce49dfffddb9"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ed}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xde7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf886}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\\\{\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "8d8c1740bfa3b9fb1b8ccd0e2e0cd6fa942530da56fd5ddaf226a105e708e03af8e40284a67658c2bbf5275f04407f30d51dd9272c25b1082df3f27bc2170ecb253f508112a46f53a9e23f93436b96f95284"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xca, 0x5, "0b150982a495a267e8642c2fb5b92da5171dc8e06fd5b9efead3c43f7d7716a0794a769238a8826aa999f344e2522c9866b17e6970ec0329030f8c00e7f2e5ee2b39f782bbc3294b94dab86d7e30a07f1c522629839ed8bb51726ecb878b377b315f17c472185063954f52a14103df4e955627f3362a9d95a2cc9335e2d54968750fc44e288f4ed4b1aba1160383c5bdea9ca209513cf26ce45ab7dae9aadcb59d6e8cb5b7b7c6796941715e27265be8b49b1148070011e595beb519c2d39700346286f573dd"}, @ETHTOOL_A_BITSET_MASK={0x29, 0x5, "e77c0d69665a5b4e083c15542b652a4e67226284b62630a282e84c372b86f8901e071c8fae"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0ee}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x240000}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "aa7ef79e793a2ed0f2089e0ce9d774ec6e60b6e0fe6e685bfe2995c3bc1c2604c5fdb29c99085afe01607b170195906c3bf6c09f5cbce3677da2205a271db612ebcbb7744fdaa5b1ae6e3c83d95ab0273692f18220c7b0094c27a680012c2f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000002e2cc65a2f66696c653000"]) r12 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x4f, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r13}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'sit0\x00', r9, 0x10, 0x40, 0x5, 0x8, {{0x15, 0x4, 0x0, 0xb, 0x54, 0x68, 0x0, 0x9, 0x0, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x13, 0xc8, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2]}, @ssrr={0x89, 0x17, 0x9a, [@loopback, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x86, 0x11, "7cfa16cf382351f190bc1978de7f31"}, @noop, @noop]}}}}}) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000cc0)={@empty, 0x0}, &(0x7f0000000d00)=0x14) sendmsg$nl_route(r11, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="640000001900040028bd7000fddbdf2580841003000400090003000008000700e000000208001900", @ANYRES32=r13, @ANYBLOB="06001c004e22000006001c204e2100000800060001000100080010000200000008000400", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="080010001c000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040081) (async) r16 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r16, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async, rerun: 64) r17 = dup2(r0, r1) (async, rerun: 64) r18 = openat$userio(0xffffffffffffff9c, &(0x7f0000000fc0), 0x100, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setresgid(r20, 0x0, 0x0) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)="de15b5171773da6932477407e3a4b8a26997cce283fae887e3885ad05e04df1b5421edc51aa660bb0cfe972373892a5e882d5a7dcebb2b979851f0a64a8bce10defb089ed59fb34aa571f3ed1fce9bd06e72b2d44810f4fb0269edbc858c3733", 0x60}, {&(0x7f00000002c0)="acfae3c9538449df6659cc12ca683dc2c3a0cf6cfc633ec65a424d16bae6fd248526bf5f1fe71f12af00f77795a6ef0abc4db570b168f6c8860a842eb591b7abf566f198d4c9c085c341f2070351ec94226ea54462fde15e651e032158447707ce601960e62f192167abb5584db03a104ab97264c71913f0882e9b3ffa4d53cf95d1e20755af8c217e4230e3da9739805ee2ecab032df8e22341228c4d90f56127fc4378641b5a2ac1b97f8e033cdff7eb955765a5bbe820ca00e5000a57c11f6cdd4dee24644f82298e", 0xca}, {&(0x7f00000003c0)="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", 0xfe}, {&(0x7f00000004c0)="762fecd9eb6b58a916ee2919ea30d72c3e1992af857f731ace14c1e82bddb550091bb0f7c2c8f958a13227a8e1b3feebd0bb0a533d4027a47cbabfeb23997bc2b0de1c14e759074a090874211090346796606b1939ab73763e0d9673f329ebe90ae05501c3d5b7044d004287819aec98a074c5e97f3475d440f0b5a4305960fc89e29e477bb8f0750cb84fe3f21558344f5fa9036c1dc2c8a5bd51244ca82762a1e6b3a7a49a9ccd2e6cb01f19542c2052284af624eaae2fbc83", 0xba}, {&(0x7f0000000580)="d8cdd8d325a86f09d0d7e7ab894c3740c232039c36a024e15f845d6a1773536821fcaeb346d9ea0b857600a043701fdb81dd221895d44b7811760ea4633ec384dc3dc12a82590bc266", 0x49}, {&(0x7f0000000600)="ef21830b3763818a0b01cfe0411be4cb943059fdc5c810ac9cfc7e5b89ad6cfcf155e475796eaab13118f36f26e4538362eb", 0x32}, {&(0x7f0000000640)="efdde2bc5062b8e3fb0fc447bba4eb2ef03de11cbc69020cbe56cd3396227c0e635689112af41569fc870c6bb74ef1601c1407ebd4a44de399177f3daa95a757b5908b80d79cdedc3c27b0885babb75b3d5c95a2e1706a3d67278b29e9c4c337bef384c237986ae4c3acea8f851b8807588be9e87ef1c656f6f6c52a1f3a2db7ec02109df434c68837b1c591192a33d4aedb2e0aad655d16efd4b102442df89147e4b1bbd86a626025db55c25151138d001ec18c7e77239aed886e72460965feaf81464f5a9e1187bb4ab0ef3481eb6ea5a61be41c787bb349665ae5012e245628a4babd54", 0xe5}], 0x7, &(0x7f0000002380)=ANY=[@ANYBLOB="10000000000000000106000000000000519b011d2282a3fce3bdb2d203ad429018fb89e01c2808497c21f9e484cd4f7f4678d324545bda5e6d63943f0f36fe5ace89aeca33dee2f39145f2ddcb1bdd6764fc05a4fb7449e8859458bdfe8604841baa51f38f6c8ac5602840bf1206e93e4c57be77dc007cf3b2ad5e3e9c33fdf82529263b713d7e6fe49970e32a20edbf7403737f40cc805b2b6359d21360da2ab1f5a7839caab9bed48ebd899ed2878efc64a050bd55303cff3a88a1f60478"], 0x10, 0x800}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)="341ee348433b64a9e0e6918e7a34bdfe287e7b1aefacbe256202ac12f8b919e8666dcef6a8d55bb5d445f64c8152533aa16f1bc1b0748983ca9bce54e22ca7b02530b8e2966d463c3a4aa6e58c48a542864b96d314dc0580b9e16f737f45331dee3bb1b6c9c971887130004af955f89f5553f0dc7044dd5b02b98003784573f1636c3ee942c67d5b43", 0x89}, {&(0x7f00000008c0)="a0d51a508d77d68674693b5d78a17a36498393d037bdcc51281d4d8cfc8c01e5364251c597445abf45872529ca98a6e79df93bf0a10574332212c0671bf51f92605e921f01aa90467f88bfb677ce52307e5ab94679ccc3532648529af5f0a71c41f0565ac4da5ae236eb10da90858a805f70016c983255db6ea36d7b6bce2e3887ff5b43a1c9f32ec155b2734e4325551356717e28abd887dc560fd7575224301d301c9a72716e9dd7e9f040816975504946", 0xb2}, {&(0x7f0000000980)="3d6c9a1d3a22f580bbf1b2c95b9b52625649ab52bd5199bf9d364d1b71388324439cf88cf7d81545009c135fad3570ff0bf71bb9d588c855a4c723c707b84f29677ee4f2da4064686d71cff4d86188f84e40e337255f95da81a09c59f88baadc0d4e726451a6630d00fd26eda4c1ef66da9f3cbc668575172675c5a96e00444a5a7bf329294ad113591dc16fa552c6d98a8366fa7808b62c461459bf184a94309e9fc50d08c0717b09e77c6452089575837928b03c38264cf734d415d2383b0b80b3c4459711eb2f53d7db93ec71202d24b0ccfe0890f5e9dd14379d86aedc89f12491404811", 0xe6}, {&(0x7f0000000a80)="77a74181fb189a0cc751028f9f76323d5352547459c05530c6fb28550f5f57ae5fc555082a06e0d7a08a919805adb399676f2fe9e5cf70459f8ce7b767", 0x3d}, {&(0x7f0000000ac0)="2cb081d96f6102a05d8ca44a1c3a18f11395cd78969bddcd02a0f0158b5c0d4cf148751b4159be45282f587b5d0a0036c153fc9c8887b9b131d7507d619ae081662de4ff3a11f672e1634e6ad25f447d74", 0x51}], 0x5, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, 0xee01}}}], 0x78, 0x4000004}}, {{&(0x7f0000000cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="7034d87738e9e312307391cc248624d25c1c256f4d2a4cac2e803302ca927dca9327228b08513ba7d004a0283c51f886bcebcaa8a94be151cb38d5c8dab9b5e91585241a7c451c57f367bebdda8148696e53cd4f127def94735b5969d9d79f6d2657dee38f894e9a7f26f8055bdffacfa78eb0a87410c5f8b12b3d138516d4b2ec15f5909d88e6558b65c93fedf9fbec1d31b2584a358351ffd0506759fd936dffd2ef3e88126fe3158c63b0b7b66a2541e1b022f94523d4a38b93683142e4371126c683ad7beddaf01e", 0xca}, {&(0x7f0000000e40)="3480b7f14cda44205d8f691fbcf4484c40754886b9f78d0c38d3cdcd0b33044aedf162c1f081fdfbeb6e434326037e7b15f23e1313f4efdd5fb2133c2bf08e9b6c6f07f0c05a944a12f8ef64654730d29d7bddfd8db362b38a1904de2a2623342c1ddc99b30ab42f6b1e183c85aa5e80eb1bd39595ef9188e1a086e8032ec62d87de431296fb022c1992257c513bc6066c371f0963805aa4b6eee0627a5e2d2634ffe9f2351a9fd36d01412ec0a36f853c207055ef04f77bf2a5329b2439", 0xbe}, {&(0x7f0000000f00)="67c838d212f5599a2d9ee618aeae27e51f70188d31ff686071d132436f508834f995b7e798bc4ce31ae6cfe885231fff5e3486566ba9caa46d01695ed4765811c14da99bbb32dbf67c57f3d528ed59b4570ce428eea24515f566d9be21", 0x5d}], 0x3, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r16, r0, r17, 0xffffffffffffffff, r18]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r20}}}], 0x70, 0x1050}}, {{&(0x7f0000001080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001100)="000828157b05a48edf05a0c966ea4e19527623da4250ac4eefb0ca1f73f6e43fee031f129e064dee138e746a81d572206ba17453deb8e4286d17ea1dd7ddc6f3bb6a2fb343c7b0ce96545a9e19accd000e50fa9622deaf4e6d07c9feae", 0x5d}, {&(0x7f0000001180)="abe8838229342b93c2de5518c1770dc27786b0d4cd55c9d8e05c4b77e17d2b90cad4179448a9ed63167adfcdead94f328b62bd58a55ca2ce523023", 0x3b}, {&(0x7f00000011c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x3d43050e3cf15772}}], 0x4, 0x4000000) (rerun: 64) 22:44:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1179.778577][T20276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1179.874517][T20278] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:00 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) 22:45:00 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x127240) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={0x0, 0xffffffff, 0x2}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46e01f7f7f080000000000000003000300ff07000097010000000000004000000000000000020000000000000003000000070038000200840a0104050000000070010100001204000000000000018000000000000003000000000000000100000000000000ffffffff00000000010001000000000006000060070000000300000000000000010000000000000007000000000000004000000000000000faffffffffffffff0700000000000000db16e7ef0b0647638e4159c6a3188e2367cb3c38d216ae25f55748b955228e13d61548cdc8b738fa312a831de55780a34afcfb9efd30aadb5020fc35150fff775d627f38ffb1190074bb24c33ec5fefea75ae33cae94d77418b323dfd4bde4643ce0d8c22d7166720911d1dddf43ea7d08c02d11517c37f43870b3e06b6b0b4cd0976866d96c9703c33443d224c1a8ca20ccbf9f05601d4f32b065707b8f7914730774397240177d19d10ae9a440fcdb2713f443bdb51021deed5ed4b853f663f3a044fa0cd638f305ffd6e073b535569009eb65c328edfbbba17d8e0ad2582a52da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffff00"/914], 0x396) r3 = memfd_secret(0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x40, 0x2ed, 0x6}) r4 = pidfd_getfd(r3, r2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000dc0)={r1, 0x8001, 0xad, 0x1}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000011c0)={r6, 0x1}) writev(r2, &(0x7f0000000040), 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x127240) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={0x0, 0xffffffff, 0x2}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/914], 0x396) (async) memfd_secret(0x0) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x40, 0x2ed, 0x6}) (async) pidfd_getfd(r3, r2, 0x0) (async) ioctl$TCXONC(r4, 0x540a, 0x2) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000dc0)={r1, 0x8001, 0xad, 0x1}) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000011c0)={r6, 0x1}) (async) writev(r2, &(0x7f0000000040), 0x0) (async) 22:45:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 22:45:00 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r2, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:45:00 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xc8, &(0x7f0000000200)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1180.496086][T20292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1180.575635][T20295] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 22:45:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x1f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:01 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x464800, 0x0) 22:45:01 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="de", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x0) 22:45:01 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) 22:45:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) write$evdev(r1, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x1f}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async, rerun: 32) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (rerun: 32) 22:45:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'erspan0\x00'}) 22:45:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000040)) 22:45:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x1f}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:02 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="dedbbb65f123dddf8c38fa7a357f48864f323f60372011ff8e14dd8864d11495c9e832b3ad955154168d3fa7fe3d4ec6ace988be91b58c70a89073ee33cfa3f00e0ddb1a44d9b1d428ebf56462039b79b8931626e17dc6173491403b19b75e9773f8a28a1eff8f3eb6b1f523b7", 0x6d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x0) 22:45:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) pread64(r1, &(0x7f0000000180)=""/253, 0xfd, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x813, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000140)={@private0, 0x0, r10}) r11 = socket$inet6(0xa, 0x3, 0x3) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r12, 0x8936, &(0x7f0000000140)={@private0, 0x0, r13}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@multicast1, @in=@empty, 0x4e23, 0x0, 0x4e23, 0x9, 0xa, 0xa0, 0x0, 0x62, r10}, {0x7ab, 0x8, 0x6, 0x6, 0x7f, 0x1bed, 0x80000001, 0x321a}, {0xfffffffffffffffa, 0xc74, 0x75, 0x7875}, 0xfffc0000, 0x80000000}, {{@in=@local, 0x4d2, 0xe4}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x2, 0x80, 0xfff, 0x7, 0x5}}, 0xe8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$GIO_FONTX(r14, 0x4b6b, &(0x7f0000000080)={0x28, 0xf, &(0x7f0000000600)}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:03 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x12003) [ 1183.329570][T20358] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:03 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1183.527868][T20358] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) pipe(&(0x7f0000000040)) 22:45:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) pread64(r1, &(0x7f0000000180)=""/253, 0xfd, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x813, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) r8 = socket$inet6(0xa, 0x3, 0x3) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000140)={@private0, 0x0, r10}) (async) r11 = socket$inet6(0xa, 0x3, 0x3) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r12, 0x8936, &(0x7f0000000140)={@private0, 0x0, r13}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@multicast1, @in=@empty, 0x4e23, 0x0, 0x4e23, 0x9, 0xa, 0xa0, 0x0, 0x62, r10}, {0x7ab, 0x8, 0x6, 0x6, 0x7f, 0x1bed, 0x80000001, 0x321a}, {0xfffffffffffffffa, 0xc74, 0x75, 0x7875}, 0xfffc0000, 0x80000000}, {{@in=@local, 0x4d2, 0xe4}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x2, 0x80, 0xfff, 0x7, 0x5}}, 0xe8) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) (async) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$GIO_FONTX(r14, 0x4b6b, &(0x7f0000000080)={0x28, 0xf, &(0x7f0000000600)}) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:04 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001080)={&(0x7f0000000d40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d80)='R', 0x1}, {&(0x7f0000000e80)="11", 0x1}], 0x2, &(0x7f0000001040)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 22:45:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1184.436398][T20377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1184.620922][T20380] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:04 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, 0x0, 0x0) 22:45:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) pread64(r1, &(0x7f0000000180)=""/253, 0xfd, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r6, 0x813, 0x0, 0x0, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x3) (rerun: 32) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000140)={@private0, 0x0, r10}) (async, rerun: 32) r11 = socket$inet6(0xa, 0x3, 0x3) (rerun: 32) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r12, 0x8936, &(0x7f0000000140)={@private0, 0x0, r13}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d4, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) (async, rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@multicast1, @in=@empty, 0x4e23, 0x0, 0x4e23, 0x9, 0xa, 0xa0, 0x0, 0x62, r10}, {0x7ab, 0x8, 0x6, 0x6, 0x7f, 0x1bed, 0x80000001, 0x321a}, {0xfffffffffffffffa, 0xc74, 0x75, 0x7875}, 0xfffc0000, 0x80000000}, {{@in=@local, 0x4d2, 0xe4}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x2, 0x80, 0xfff, 0x7, 0x5}}, 0xe8) (rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) (async) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$GIO_FONTX(r14, 0x4b6b, &(0x7f0000000080)={0x28, 0xf, &(0x7f0000000600)}) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f0000000040)) 22:45:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000540)=""/172, 0x26, 0xac, 0x1}, 0x20) 22:45:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1185.227645][T20389] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:05 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000009c0), 0x4) 22:45:05 executing program 4: getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 22:45:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x189801, 0x100) syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:06 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:06 executing program 3: socketpair(0x23, 0x0, 0xfff, &(0x7f0000000000)) 22:45:06 executing program 4: getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8", 0x1}, {&(0x7f0000000600)="f883f25916ab841e65a927c58bc5ddb1457962c4cc057796", 0x18}], 0x2, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}, 0x80) 22:45:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x189801, 0x100) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:07 executing program 4: getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x2}) 22:45:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000080)=""/180, 0x26, 0xb4, 0x1}, 0x20) 22:45:07 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x189801, 0x100) syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x10b800, 0x0) fgetxattr(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d2ecda19c574ecb60c3540736716e429e5b133dc3f3c0261c5167506ae9590c9b1b5961000000000000000300000000000080077ca24cceb35ee630b39fed86fce8f8e9ec96d2554775b659679d"], &(0x7f0000000180)=""/202, 0xca) syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:08 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000a00)=""/235, 0x1000000, 0xeb, 0x1}, 0x20) 22:45:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x1, 0x7}, 0x48) 22:45:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b6c, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x6) 22:45:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x10b800, 0x0) fgetxattr(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d2ecda19c574ecb60c3540736716e429e5b133dc3f3c0261c5167506ae9590c9b1b5961000000000000000300000000000080077ca24cceb35ee630b39fed86fce8f8e9ec96d2554775b659679d"], &(0x7f0000000180)=""/202, 0xca) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:08 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xfffffffb}, 0x8) 22:45:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 22:45:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b6c, 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x6) 22:45:08 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x81801, 0x0) 22:45:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:09 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b6c, 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x6) 22:45:09 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000680)=@raw=[@map_fd], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 22:45:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x3, 0xfb, &(0x7f0000000380)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1]}, 0x80) 22:45:09 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x10b800, 0x0) fgetxattr(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d2ecda19c574ecb60c3540736716e429e5b133dc3f3c0261c5167506ae9590c9b1b5961000000000000000300000000000080077ca24cceb35ee630b39fed86fce8f8e9ec96d2554775b659679d"], &(0x7f0000000180)=""/202, 0xca) (async) fgetxattr(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d2ecda19c574ecb60c3540736716e429e5b133dc3f3c0261c5167506ae9590c9b1b5961000000000000000300000000000080077ca24cceb35ee630b39fed86fce8f8e9ec96d2554775b659679d"], &(0x7f0000000180)=""/202, 0xca) syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:09 executing program 3: getpid() syz_clone(0x5208200, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)="d6daa1cc9957c708840ba721ab81ad4d741cf6a22f5ea7539a026ca72a21e80af626726d27732e2500") socketpair(0x24, 0x0, 0x0, &(0x7f0000000180)) 22:45:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x0) 22:45:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="00000400079264287ab3bbe1825f4c2020c97221f555143cef8a9c69e33c3a1afb67f1bee9d8f20013f4b0ac35b66ec05f5e6118d7f2fb0a4c81bd274ff0821d32c2c83f3a9c617d5e50e563c7f5a4bdcd68651bac250025a999df8dff74205741e88eef971da60bfa2aee08fdb73ae9abb5276082ca7ffb5ce74417ea4b044f03c3cf4c23ccfb66e8f30aa68ab31f769fa630dc45349f555b8a67aa199d1df08d416806951f7b1dbacca0c03f56b579f537d8f08e46b34cf0cf1f7489cea34a7166ae384c826b3f31c050d31b09", 0xce}], 0x1) 22:45:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={0x0, &(0x7f0000001b80)=""/139, 0x0, 0x8b}, 0x20) 22:45:10 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:10 executing program 5: socketpair(0x2, 0x3, 0x100, &(0x7f0000000140)) 22:45:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) (async, rerun: 32) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) (rerun: 32) 22:45:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}, 0x0) 22:45:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="00000400079264287ab3bbe1825f4c2020c97221f555143cef8a9c69e33c3a1afb67f1bee9d8f20013f4b0ac35b66ec05f5e6118d7f2fb0a4c81bd274ff0821d32c2c83f3a9c617d5e50e563c7f5a4bdcd68651bac250025a999df8dff74205741e88eef971da60bfa2aee08fdb73ae9abb5276082ca7ffb5ce74417ea4b044f03c3cf4c23ccfb66e8f30aa68ab31f769fa630dc45349f555b8a67aa199d1df08d416806951f7b1dbacca0c03f56b579f537d8f08e46b34cf0cf1f7489cea34a7166ae384c826b3f31c050d31b09", 0xce}], 0x1) 22:45:10 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz0\x00', 0x200002, 0x0) 22:45:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 22:45:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:11 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="00000400079264287ab3bbe1825f4c2020c97221f555143cef8a9c69e33c3a1afb67f1bee9d8f20013f4b0ac35b66ec05f5e6118d7f2fb0a4c81bd274ff0821d32c2c83f3a9c617d5e50e563c7f5a4bdcd68651bac250025a999df8dff74205741e88eef971da60bfa2aee08fdb73ae9abb5276082ca7ffb5ce74417ea4b044f03c3cf4c23ccfb66e8f30aa68ab31f769fa630dc45349f555b8a67aa199d1df08d416806951f7b1dbacca0c03f56b579f537d8f08e46b34cf0cf1f7489cea34a7166ae384c826b3f31c050d31b09", 0xce}], 0x1) 22:45:12 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:12 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) 22:45:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pid(r0, 0x0, 0x0) 22:45:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 22:45:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x70]}}, &(0x7f0000000a00)=""/235, 0x2b, 0xeb, 0x1}, 0x20) 22:45:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2962f7d8c63eb6ffcdd8e2bb969e157141c39f99fc275dfbda0afb8fea2a0d88d1f64d3292bf198ccb0fbe4f9b6aa344b0434d938737e2cf0e131ec4c206742fbde3c9add59eafe7d5bc1ea3eaf62b0d7f", 0x51}], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x43947a8c540d0a0a) splice(r1, &(0x7f0000000100)=0xff, r0, &(0x7f00000000c0)=0x5, 0xffffffffe805daf1, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='./fFle0\x00']) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000140)={0x1, 0x4fd, 0xfff, 0x0, 0x1045}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000001c0)={0xd491d3058395bf39}) 22:45:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa864300", 0x7}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ebc017c99611e0c9fdbde44b62c8a2523b64c881a4fa63e20bd7dfd1e6d53cb099b6f65582fae720a26b701970722401d7f508517a808f3a2e4b6cc37660f15038d8cdca16359484663ad8bcef9bebf14426f14afe6de68f65a29d70aa090b9e497ae90d3c18a21cec0c37cfe1091af263ceca53792b72166a6f73fd5d693a9472e606c5", 0x84}, {&(0x7f0000000100)="352879daac74c1bebedd4bc0dbb55eb63222458f52b6e412821b918e26bcee0a075326408db7272ab688355a6e5f69d4d2909ba9a9dfb7b880edbed95cfc58976557afb4282f0c3bf9567f3eb058b1ca128faabb7f972a861ae887b5556135b797412ecfef0deb600d3e2cf2fe161705d8c120ccecab87791477bc9022c8c22f96b09534997c446e02f04a0a6d55ac7f4a8c6accffc99a91eb9943fdfb2e56948e46b81e", 0xa4}, {&(0x7f0000000240)="b57429c70e3cea33731f6090d390e406d35f66a98f620248a1e41157", 0x1c}], 0x3) 22:45:13 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) 22:45:13 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0x1, &(0x7f0000001900)=@raw=[@call], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:13 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:13 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f00000000c0)) 22:45:13 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) 22:45:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:14 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 22:45:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async, rerun: 32) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2962f7d8c63eb6ffcdd8e2bb969e157141c39f99fc275dfbda0afb8fea2a0d88d1f64d3292bf198ccb0fbe4f9b6aa344b0434d938737e2cf0e131ec4c206742fbde3c9add59eafe7d5bc1ea3eaf62b0d7f", 0x51}], 0x1) (async, rerun: 32) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x43947a8c540d0a0a) splice(r1, &(0x7f0000000100)=0xff, r0, &(0x7f00000000c0)=0x5, 0xffffffffe805daf1, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='./fFle0\x00']) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000140)={0x1, 0x4fd, 0xfff, 0x0, 0x1045}) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000001c0)={0xd491d3058395bf39}) 22:45:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa864300", 0x7}) (async, rerun: 64) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ebc017c99611e0c9fdbde44b62c8a2523b64c881a4fa63e20bd7dfd1e6d53cb099b6f65582fae720a26b701970722401d7f508517a808f3a2e4b6cc37660f15038d8cdca16359484663ad8bcef9bebf14426f14afe6de68f65a29d70aa090b9e497ae90d3c18a21cec0c37cfe1091af263ceca53792b72166a6f73fd5d693a9472e606c5", 0x84}, {&(0x7f0000000100)="352879daac74c1bebedd4bc0dbb55eb63222458f52b6e412821b918e26bcee0a075326408db7272ab688355a6e5f69d4d2909ba9a9dfb7b880edbed95cfc58976557afb4282f0c3bf9567f3eb058b1ca128faabb7f972a861ae887b5556135b797412ecfef0deb600d3e2cf2fe161705d8c120ccecab87791477bc9022c8c22f96b09534997c446e02f04a0a6d55ac7f4a8c6accffc99a91eb9943fdfb2e56948e46b81e", 0xa4}, {&(0x7f0000000240)="b57429c70e3cea33731f6090d390e406d35f66a98f620248a1e41157", 0x1c}], 0x3) (rerun: 64) 22:45:14 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xc8, &(0x7f0000000200)=""/200, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:14 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001ec0)) 22:45:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2962f7d8c63eb6ffcdd8e2bb969e157141c39f99fc275dfbda0afb8fea2a0d88d1f64d3292bf198ccb0fbe4f9b6aa344b0434d938737e2cf0e131ec4c206742fbde3c9add59eafe7d5bc1ea3eaf62b0d7f", 0x51}], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x43947a8c540d0a0a) splice(r1, &(0x7f0000000100)=0xff, r0, &(0x7f00000000c0)=0x5, 0xffffffffe805daf1, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='./fFle0\x00']) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000140)={0x1, 0x4fd, 0xfff, 0x0, 0x1045}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000001c0)={0xd491d3058395bf39}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2962f7d8c63eb6ffcdd8e2bb969e157141c39f99fc275dfbda0afb8fea2a0d88d1f64d3292bf198ccb0fbe4f9b6aa344b0434d938737e2cf0e131ec4c206742fbde3c9add59eafe7d5bc1ea3eaf62b0d7f", 0x51}], 0x1) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x43947a8c540d0a0a) (async) splice(r1, &(0x7f0000000100)=0xff, r0, &(0x7f00000000c0)=0x5, 0xffffffffe805daf1, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='./fFle0\x00']) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000140)={0x1, 0x4fd, 0xfff, 0x0, 0x1045}) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f00000001c0)={0xd491d3058395bf39}) (async) 22:45:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001ec0)) 22:45:14 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 22:45:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8", 0x1}, {&(0x7f0000000600)="f8", 0x1}], 0x2}, 0x0) 22:45:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="6389730a0087e386d4d7fd099c8ab1cceaeb43042c2d003c8da5a59db39ddad95dd7dc143aa68cf8ccdcbd98", 0x2c}, {&(0x7f0000000240)="93cf78123e20d5fd6d6cc472b4fafcc1a7eaf643619bf1285cdc116f6626ca7149e83709990ee90daceff91d154ac59cd085621ddba11ba869de68e2867fb3728b33dbf0077db7fd9a8b5dc2ccc92a9465b7", 0x52}, {&(0x7f00000002c0)="6ca1dad5a182c2d2f7deda0322fd7b00547209fa121a926692aa2d47c176c5f7e1fed26d93ed44ee7efc", 0x2a}, {&(0x7f00000005c0)="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", 0xe19}], 0x4}, 0x0) 22:45:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa864300", 0x7}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ebc017c99611e0c9fdbde44b62c8a2523b64c881a4fa63e20bd7dfd1e6d53cb099b6f65582fae720a26b701970722401d7f508517a808f3a2e4b6cc37660f15038d8cdca16359484663ad8bcef9bebf14426f14afe6de68f65a29d70aa090b9e497ae90d3c18a21cec0c37cfe1091af263ceca53792b72166a6f73fd5d693a9472e606c5", 0x84}, {&(0x7f0000000100)="352879daac74c1bebedd4bc0dbb55eb63222458f52b6e412821b918e26bcee0a075326408db7272ab688355a6e5f69d4d2909ba9a9dfb7b880edbed95cfc58976557afb4282f0c3bf9567f3eb058b1ca128faabb7f972a861ae887b5556135b797412ecfef0deb600d3e2cf2fe161705d8c120ccecab87791477bc9022c8c22f96b09534997c446e02f04a0a6d55ac7f4a8c6accffc99a91eb9943fdfb2e56948e46b81e", 0xa4}, {&(0x7f0000000240)="b57429c70e3cea33731f6090d390e406d35f66a98f620248a1e41157", 0x1c}], 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa864300", 0x7}) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ebc017c99611e0c9fdbde44b62c8a2523b64c881a4fa63e20bd7dfd1e6d53cb099b6f65582fae720a26b701970722401d7f508517a808f3a2e4b6cc37660f15038d8cdca16359484663ad8bcef9bebf14426f14afe6de68f65a29d70aa090b9e497ae90d3c18a21cec0c37cfe1091af263ceca53792b72166a6f73fd5d693a9472e606c5", 0x84}, {&(0x7f0000000100)="352879daac74c1bebedd4bc0dbb55eb63222458f52b6e412821b918e26bcee0a075326408db7272ab688355a6e5f69d4d2909ba9a9dfb7b880edbed95cfc58976557afb4282f0c3bf9567f3eb058b1ca128faabb7f972a861ae887b5556135b797412ecfef0deb600d3e2cf2fe161705d8c120ccecab87791477bc9022c8c22f96b09534997c446e02f04a0a6d55ac7f4a8c6accffc99a91eb9943fdfb2e56948e46b81e", 0xa4}, {&(0x7f0000000240)="b57429c70e3cea33731f6090d390e406d35f66a98f620248a1e41157", 0x1c}], 0x3) (async) 22:45:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x15, 0x1, 0x44, &(0x7f00000002c0)="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"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e300000002000000036a0000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) write$evdev(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018580000090000000000000000000000e30ce70ebd46000095000000000000008520000004000000851000000100000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000950200"/32], &(0x7f0000000840)='GPL\x00', 0xfffffff9, 0x1000, &(0x7f0000000880)=""/4096, 0x41000, 0x2f882919aa35297e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0x3, 0xffffff81, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001900)=[r1, r1, r1, r1, r1, r1, r1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x9, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @ldst={0x1, 0x0, 0x3, 0x2, 0xa, 0xc, 0x1}, @generic={0x5c, 0x6, 0x9, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x94}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x71, &(0x7f00000006c0)=""/113, 0x41000, 0x10, '\x00', 0x0, 0xd, r2, 0x8, &(0x7f0000000740)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x6, 0x1, 0x40, 0x8}, 0x10, 0x0, r3, 0x0, &(0x7f00000019c0)=[r1, 0xffffffffffffffff]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797a740200"/16, @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e30000000200000003000000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) write$evdev(r1, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b6c, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000001f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@RTM_GETNSID={0x54, 0x5a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000811}, 0x48080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000001fc0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x38, 0x4, 0x0, 0x6, 0xe0, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x12, "4f896dd5867a8719c377c50000040041"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r4, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={&(0x7f0000001a80)="6e738b17ab3fc53b9842e45baba8b9159b59196bd47d76f9a974dca7598f071e25dd0c75296b4d58ec99371f7030be910266cc2a5aeba1afe7fa8b8775ead68fb82ca1568c5fba31d5f22ab84718af104618982a38bd663371b232256c20c46769d445966f2fcb50e78232369a7b24ea365b82114910fec1412f46e67811281240e9056918f947135aed3e5bafa98164eb4ac9d7894b4e200a96c843159286390dace3d8a773d0886c01bf324c087d2640156c3f71a3d7046617d33a067a0d1d598ff6b8ef09d3f07ea2df88fc64f6398476", &(0x7f0000001b80)=""/246, &(0x7f0000001c80)="c7b420303ad2aafbdca212fcf854ea220debdf0ef339674896a84b50030ca54569d29972af663745b85a96302db4bfa0f5e817aa1e8143317a572608b54e15c757e657e5eb891cfeec3eb4fcdbee490c17160ad9d61d19ea2df7d4f5d1684dd1194bed2cd895440e26ca936f6092556c02d180a38d61fdd752c676785df8b1a6ae76af1a2a93f765a8e81234bbe9bbf41d15cd90a54311d4de0edc7bc91b3785e860d4a4b99a0710e9a594501de1f3cbeb01b60e2b75ae6dc6a764035405ad426c1247adf692878c02b6a36f9e447a228d0d59b304cf5591c4", &(0x7f0000001d80)="7dcc6685b503cfac994a007a2bda82f81453133779ab502c09ea4a3cc9de7c7ba713c60ab5a33bd07d1f97c712c77b2126545dd9f2f38a5955397f64d63975da21ecfb0988fda761520d8f845ee6ca62d0d7b2828f253cc6f66aac241e5569e9cedd71a7c4d85222363efafc608a2c6fa3abc8eff7e7f40832772fec5cc4ac597bbc8b68e275aa796655ee68e05c094a47e1df2720255fa406340992d172770891d5abcf784c0f558186346c4adedd21b8233349e893d25bc3e3a893bec153e7b231e26569fabc261fad6236b1eb8305e7", 0x1, r4, 0x4}, 0x38) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 22:45:16 executing program 3: syz_clone(0xa209680, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 22:45:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:16 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}}, &(0x7f0000000c40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 22:45:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x70]}}, &(0x7f0000000a00)=""/235, 0x2b, 0xeb, 0x1}, 0x20) 22:45:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x188}, 0x0) 22:45:17 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x80000001}, 0x8) 22:45:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000200003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x64f4}}, './file0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x88, 0x0, 0x3f, 0x1, 0x0, 0x9, 0x64}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:45:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x15, 0x1, 0x44, &(0x7f00000002c0)="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"}) (async, rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async, rerun: 32) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e300000002000000036a0000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) (async) write$evdev(r2, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018580000090000000000000000000000e30ce70ebd46000095000000000000008520000004000000851000000100000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000950200"/32], &(0x7f0000000840)='GPL\x00', 0xfffffff9, 0x1000, &(0x7f0000000880)=""/4096, 0x41000, 0x2f882919aa35297e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0x3, 0xffffff81, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001900)=[r1, r1, r1, r1, r1, r1, r1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x9, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @ldst={0x1, 0x0, 0x3, 0x2, 0xa, 0xc, 0x1}, @generic={0x5c, 0x6, 0x9, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x94}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x71, &(0x7f00000006c0)=""/113, 0x41000, 0x10, '\x00', 0x0, 0xd, r2, 0x8, &(0x7f0000000740)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x6, 0x1, 0x40, 0x8}, 0x10, 0x0, r3, 0x0, &(0x7f00000019c0)=[r1, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797a740200"/16, @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e30000000200000003000000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) (async) write$evdev(r1, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b6c, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async, rerun: 64) write$evdev(r6, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000001f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@RTM_GETNSID={0x54, 0x5a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000811}, 0x48080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000001fc0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x38, 0x4, 0x0, 0x6, 0xe0, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x12, "4f896dd5867a8719c377c50000040041"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r4, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={&(0x7f0000001a80)="6e738b17ab3fc53b9842e45baba8b9159b59196bd47d76f9a974dca7598f071e25dd0c75296b4d58ec99371f7030be910266cc2a5aeba1afe7fa8b8775ead68fb82ca1568c5fba31d5f22ab84718af104618982a38bd663371b232256c20c46769d445966f2fcb50e78232369a7b24ea365b82114910fec1412f46e67811281240e9056918f947135aed3e5bafa98164eb4ac9d7894b4e200a96c843159286390dace3d8a773d0886c01bf324c087d2640156c3f71a3d7046617d33a067a0d1d598ff6b8ef09d3f07ea2df88fc64f6398476", &(0x7f0000001b80)=""/246, &(0x7f0000001c80)="c7b420303ad2aafbdca212fcf854ea220debdf0ef339674896a84b50030ca54569d29972af663745b85a96302db4bfa0f5e817aa1e8143317a572608b54e15c757e657e5eb891cfeec3eb4fcdbee490c17160ad9d61d19ea2df7d4f5d1684dd1194bed2cd895440e26ca936f6092556c02d180a38d61fdd752c676785df8b1a6ae76af1a2a93f765a8e81234bbe9bbf41d15cd90a54311d4de0edc7bc91b3785e860d4a4b99a0710e9a594501de1f3cbeb01b60e2b75ae6dc6a764035405ad426c1247adf692878c02b6a36f9e447a228d0d59b304cf5591c4", &(0x7f0000001d80)="7dcc6685b503cfac994a007a2bda82f81453133779ab502c09ea4a3cc9de7c7ba713c60ab5a33bd07d1f97c712c77b2126545dd9f2f38a5955397f64d63975da21ecfb0988fda761520d8f845ee6ca62d0d7b2828f253cc6f66aac241e5569e9cedd71a7c4d85222363efafc608a2c6fa3abc8eff7e7f40832772fec5cc4ac597bbc8b68e275aa796655ee68e05c094a47e1df2720255fa406340992d172770891d5abcf784c0f558186346c4adedd21b8233349e893d25bc3e3a893bec153e7b231e26569fabc261fad6236b1eb8305e7", 0x1, r4, 0x4}, 0x38) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:45:17 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 22:45:17 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:17 executing program 3: syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 22:45:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000300003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x64f4}}, './file0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x88, 0x0, 0x3f, 0x1, 0x0, 0x9, 0x64}, 0x8) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:45:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x15, 0x1, 0x44, &(0x7f00000002c0)="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"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e300000002000000036a0000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) (async, rerun: 64) write$evdev(r2, 0x0, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018580000090000000000000000000000e30ce70ebd46000095000000000000008520000004000000851000000100000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000950200"/32], &(0x7f0000000840)='GPL\x00', 0xfffffff9, 0x1000, &(0x7f0000000880)=""/4096, 0x41000, 0x2f882919aa35297e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0x3, 0xffffff81, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001900)=[r1, r1, r1, r1, r1, r1, r1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x9, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @ldst={0x1, 0x0, 0x3, 0x2, 0xa, 0xc, 0x1}, @generic={0x5c, 0x6, 0x9, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x94}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x71, &(0x7f00000006c0)=""/113, 0x41000, 0x10, '\x00', 0x0, 0xd, r2, 0x8, &(0x7f0000000740)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x6, 0x1, 0x40, 0x8}, 0x10, 0x0, r3, 0x0, &(0x7f00000019c0)=[r1, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797a740200"/16, @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ed388c57f39404010044240be0000010000000040080000000000000060000d5e30000000200000003000000008631000000030105a976ba0205856f85070a44421d8c7890e91e00054fa66d050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800ac1414aa00400000e00000024e192ea4ac1e0101000001936401010000007fff0a010101000000006401010100000020000000"]}) (async, rerun: 64) write$evdev(r1, 0x0, 0x0) (async, rerun: 64) ioctl$TCFLSH(r1, 0x540b, 0x2) (async, rerun: 64) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b6c, 0x0) (async, rerun: 32) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000001f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@RTM_GETNSID={0x54, 0x5a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000811}, 0x48080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000001fc0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x38, 0x4, 0x0, 0x6, 0xe0, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x12, "4f896dd5867a8719c377c50000040041"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async, rerun: 32) write$evdev(r4, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={&(0x7f0000001a80)="6e738b17ab3fc53b9842e45baba8b9159b59196bd47d76f9a974dca7598f071e25dd0c75296b4d58ec99371f7030be910266cc2a5aeba1afe7fa8b8775ead68fb82ca1568c5fba31d5f22ab84718af104618982a38bd663371b232256c20c46769d445966f2fcb50e78232369a7b24ea365b82114910fec1412f46e67811281240e9056918f947135aed3e5bafa98164eb4ac9d7894b4e200a96c843159286390dace3d8a773d0886c01bf324c087d2640156c3f71a3d7046617d33a067a0d1d598ff6b8ef09d3f07ea2df88fc64f6398476", &(0x7f0000001b80)=""/246, &(0x7f0000001c80)="c7b420303ad2aafbdca212fcf854ea220debdf0ef339674896a84b50030ca54569d29972af663745b85a96302db4bfa0f5e817aa1e8143317a572608b54e15c757e657e5eb891cfeec3eb4fcdbee490c17160ad9d61d19ea2df7d4f5d1684dd1194bed2cd895440e26ca936f6092556c02d180a38d61fdd752c676785df8b1a6ae76af1a2a93f765a8e81234bbe9bbf41d15cd90a54311d4de0edc7bc91b3785e860d4a4b99a0710e9a594501de1f3cbeb01b60e2b75ae6dc6a764035405ad426c1247adf692878c02b6a36f9e447a228d0d59b304cf5591c4", &(0x7f0000001d80)="7dcc6685b503cfac994a007a2bda82f81453133779ab502c09ea4a3cc9de7c7ba713c60ab5a33bd07d1f97c712c77b2126545dd9f2f38a5955397f64d63975da21ecfb0988fda761520d8f845ee6ca62d0d7b2828f253cc6f66aac241e5569e9cedd71a7c4d85222363efafc608a2c6fa3abc8eff7e7f40832772fec5cc4ac597bbc8b68e275aa796655ee68e05c094a47e1df2720255fa406340992d172770891d5abcf784c0f558186346c4adedd21b8233349e893d25bc3e3a893bec153e7b231e26569fabc261fad6236b1eb8305e7", 0x1, r4, 0x4}, 0x38) (async, rerun: 64) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) (rerun: 64) 22:45:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) 22:45:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000400003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x64f4}}, './file0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x88, 0x0, 0x3f, 0x1, 0x0, 0x9, 0x64}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x64f4}}, './file0\x00'}) (async) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x88, 0x0, 0x3f, 0x1, 0x0, 0x9, 0x64}, 0x8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 22:45:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@kfunc]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:18 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={0xffffffffffffffff, 0x0}, 0x20) 22:45:18 executing program 1: bpf$OBJ_PIN_MAP(0x21, &(0x7f0000004e40)={0x0}, 0x10) 22:45:18 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@jmp, @jmp], &(0x7f00000000c0)='GPL\x00', 0x6, 0xa1, &(0x7f0000000100)=""/161, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:18 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000500003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:18 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, 0x0}, 0x80) 22:45:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0xffffff67, 0x81, 0x4, 0x0, "02ca84b5b964e0cf91fa2074fa589a78878643", 0x20, 0x8000}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x6280) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="ec992c0a1c4fec3d0f3e5ac1da2f01b4726f69d55201f222a41ef6a8954f75248225eef625833dffc250dea3bbf4694392297e31086676721008ad0524921f00ab62f71a2de7c041c21d68480c9f6cafe7749e29865de6bde75dce033db2b35f62a33f6e5ccd213edebea73f415635c471cad5d52b7d37d8bb8f302ef249306b3c24d44c1543f653c16a6cf2af20ef0d7ead7074fa1865c46fe4d541", 0x9c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="37af45abfba9ad713a2c39989f9e9794a0ab2ee3288b35d1d66bca6bce8f840bda15fb9a3c328606f1c96e8222dfe7cfbf0ce1e73432a61cd5cfa7ee5a80e867bd07ce5bc4a85555e7d142bbd39f1b5301f66afa196c84ad153b321ddc2b207aebf2dd052cbba3959b21219e1225220782b4c071b121f4a7808890ca3ded157fae96c751170a277ddf167481fbfc9e969cab8747", 0x94}, {&(0x7f00000002c0)="580073d75570aeb2951ac93b76bc22f15b9517d1235cb99196fb3b18281516d551632066c2ca88645c9d6537c34819", 0x2f}], 0x4) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r2 = syz_io_uring_complete(0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 22:45:18 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 22:45:18 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000009c0)) 22:45:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x1}]}]}}, &(0x7f0000000200)=""/169, 0x3e, 0xa9, 0x1}, 0x20) 22:45:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0xffffff67, 0x81, 0x4, 0x0, "02ca84b5b964e0cf91fa2074fa589a78878643", 0x20, 0x8000}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x6280) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="ec992c0a1c4fec3d0f3e5ac1da2f01b4726f69d55201f222a41ef6a8954f75248225eef625833dffc250dea3bbf4694392297e31086676721008ad0524921f00ab62f71a2de7c041c21d68480c9f6cafe7749e29865de6bde75dce033db2b35f62a33f6e5ccd213edebea73f415635c471cad5d52b7d37d8bb8f302ef249306b3c24d44c1543f653c16a6cf2af20ef0d7ead7074fa1865c46fe4d541", 0x9c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="37af45abfba9ad713a2c39989f9e9794a0ab2ee3288b35d1d66bca6bce8f840bda15fb9a3c328606f1c96e8222dfe7cfbf0ce1e73432a61cd5cfa7ee5a80e867bd07ce5bc4a85555e7d142bbd39f1b5301f66afa196c84ad153b321ddc2b207aebf2dd052cbba3959b21219e1225220782b4c071b121f4a7808890ca3ded157fae96c751170a277ddf167481fbfc9e969cab8747", 0x94}, {&(0x7f00000002c0)="580073d75570aeb2951ac93b76bc22f15b9517d1235cb99196fb3b18281516d551632066c2ca88645c9d6537c34819", 0x2f}], 0x4) (async) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) (async) r2 = syz_io_uring_complete(0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 22:45:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000600003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:19 executing program 1: bpf$PROG_BIND_MAP(0x23, 0x0, 0xaf) 22:45:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffc01, [{0xa}]}]}}, &(0x7f00000000c0)=""/165, 0x32, 0xa5, 0x1}, 0x20) 22:45:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="e701b3968a5a83fa8015511d8f8cba88ef9fd7abbc34d939714f15c0542ebf0febc0aa12031a21216f7ddbe1049b3b435ac24310e5ac8f", 0x37}, {&(0x7f0000000200)="3e3a8a116f7ca5fac3ae", 0xa}], 0x2}, 0x0) 22:45:19 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000700003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:19 executing program 3: bpf$OBJ_PIN_MAP(0x14, &(0x7f0000004e40)={0x0}, 0x10) 22:45:19 executing program 5: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000400)) 22:45:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0xffffff67, 0x81, 0x4, 0x0, "02ca84b5b964e0cf91fa2074fa589a78878643", 0x20, 0x8000}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x6280) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="ec992c0a1c4fec3d0f3e5ac1da2f01b4726f69d55201f222a41ef6a8954f75248225eef625833dffc250dea3bbf4694392297e31086676721008ad0524921f00ab62f71a2de7c041c21d68480c9f6cafe7749e29865de6bde75dce033db2b35f62a33f6e5ccd213edebea73f415635c471cad5d52b7d37d8bb8f302ef249306b3c24d44c1543f653c16a6cf2af20ef0d7ead7074fa1865c46fe4d541", 0x9c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="37af45abfba9ad713a2c39989f9e9794a0ab2ee3288b35d1d66bca6bce8f840bda15fb9a3c328606f1c96e8222dfe7cfbf0ce1e73432a61cd5cfa7ee5a80e867bd07ce5bc4a85555e7d142bbd39f1b5301f66afa196c84ad153b321ddc2b207aebf2dd052cbba3959b21219e1225220782b4c071b121f4a7808890ca3ded157fae96c751170a277ddf167481fbfc9e969cab8747", 0x94}, {&(0x7f00000002c0)="580073d75570aeb2951ac93b76bc22f15b9517d1235cb99196fb3b18281516d551632066c2ca88645c9d6537c34819", 0x2f}], 0x4) (async) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r2 = syz_io_uring_complete(0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 22:45:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, r0, 0x1d, 0x2, r0}, 0x14) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, r0, 0xd}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r0}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=r0, 0x4) r3 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000300)='syz0\x00', 0x1ff) mkdirat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7f, 0x12, &(0x7f0000000380)="0cb8f785dc445fdbf1c2a278c64a112707a39617567103a5731c331eef6d58c506d7df2c4e2d657cc569bda46c5baec7493da7350587f0c905ed44078c4f9598ab36f7992ace7386d7092361233827390266bfd3525e56b645b5432361a1c98cf50b2f306568a011f1696ce4201f757f71bb0f1eb68d6a9b138fb798e06904", &(0x7f0000000400)=""/18, 0x4, 0x0, 0xe9, 0x83, &(0x7f0000000440)="04f332e8bfef668a099e0b378d025662a8a1db8a067149418827b74f2b054dadeee146e5a5d4b3ebe95255d3e309a1fe244a09e18722d2066faa6af0c29524cd5e26d1cd9d2b7581078ca85624019a17487c007c05408ed509b97a75746330f04e0c502fe79e7a1877fed6ac8e000ad793d183cacd2d348defe8a35ba09369a3590d48c94994a548754b67147f55b8029695f212fc37628f6143450726b284cce4b461dc0089e5d96940f1383f42a53eab8a088dcd28319444078e8d01781e8a38c08e12b675e24595ac9551d73ac6925e7c7f1c0b1960a5ed2826902722cbc59dc3b9115359dd3b72", &(0x7f0000000540)="ae4e685630d5650d5dec1bbbde30937c4fd2a64926350892ac4df075fa5aebaa6719297a6058651014b96517bc35404bfc19477d43cefeeec4c41ff111e589668472ab05e8c3dbe0f272f89b4008aee7d7ba1121141dca6083c99d69a8b88c9ef421a1a14cf40d2b983c4efc44e2e947962c93c0f8e0650ba70bfcc9f43976dcb8e163", 0x1, 0xe6}, 0x48) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r0}, 0x8) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000006c0)=r4) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.current\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000780)={0x5, &(0x7f0000000740)=[{0x0, 0xfc, 0x1, 0x5}, {0x0, 0x4, 0x8, 0x7fffffff}, {0xfff, 0x20, 0x8, 0x9}, {0x2, 0xfe, 0xf9, 0x55fd7e1e}, {0xff, 0xe2, 0x3, 0x5}]}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='host1x_syncpt_load_min\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0x8, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x10, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r7 = syz_clone(0x40000000, &(0x7f0000000b40)="b08908000a2be50ba6947fddcc1bffc7589b4f1a774aed8e3c61d46a6b7cf14d85f0ac88a1e1058e51a004e395014dcc8ce3984de69a43e859349087871575dbb44a7f28197cd4df3904e68accc55f64ef1cebacb398e465412d1271d8c09edab066f960b5adefa6e695a22b617243401efec9804790a82f9cbe02a74b8927416bb9f9c20954f369344557fcbf66cf7ef7e7a430082e69b5c21e27e93f0190c38348810ca44a19997a9c5998b3af4ef2c9", 0xb1, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="d80c5d8d69c05c1c620fe9ec") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={r7, r0, 0x0, 0x17, &(0x7f0000000cc0)='host1x_syncpt_load_min\x00'}, 0x30) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000d40)=r6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d80)={r5, r2, 0x1}, 0x10) r8 = openat$cgroup_ro(r4, &(0x7f0000001180)='pids.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000dc0)="bcf4d6e03faa80560dab0b74b2672455606bfef98ff2858116838ddc9a1690916ad20a60c32e2f9be25e6b79120c138d0b77147ce5d608fae90c94917f24a1ac65fd77fef00b50b3df846dd71d1c3a1e752b2d11112209135ca8d2063243df2ba45d21931e19e4bd67cfeadcd5189610ae64e485cfc54314d48397025a2332c693b542bdf64a21cec755a310e0721b2fd17ef174f1e6a14e5fc04e753a7956271bc7b7f1a7f943a83e426d89caca5be2a2eb76152e61db564ee59dad9b76646579e99cda7856c264bd0fe0c8b32afc6fc3b143c9ee69ad4da6c6a95cdc9610206db627f2e70cbbd99c30ae7395b57b565470b872a1e19c59", &(0x7f0000000ec0)=""/203, &(0x7f0000000fc0)="25544200692c9895651cca91d51a594727e68c4a21973867ee797d7a40902fcf551588fe2d7a97c83f414ded14157b3cc9ef8e2b383a007b7fe9c603a1b66b19a277a37d45f7773b48ebae936a54cdd1976f4c3da9753256a30163688c6ee1490146c409aa0bde2d22d06bf8f7ec7d7d306d6706328bff9a0a3143587b737eb71e25614e68c71bd1120fa0b81be4e8f5671a1fc745c9440bc0fc8211d5cb2a5c47fb68d6647c41b645053e7cab", &(0x7f0000001080)="5dbc6849da29ca68971e59a43ccd3e78ba01c9378ea177a0a41c744cae1ef52c1f930138ec4426027e03cf7708a2d2071e66a40809408955382c448d6bd9650b00c5e38cde1031e89c7f5ce5b1ba18e0cf14d1f0ca5025512f8e223eb3a381863a8f149e1dcc3b81821f962b837650eed3c9f7e067610f04727807517d26ee24b3d566371b0b024f6033eb42eb35c53ca941eb4da6b0bdf9100b166e1166b0ab888e0b8e5520385ead75ad92d24562dbc95364221ee920b3acb1ad6edd3ed6069e62b2c3033afd64af3954f9d492030d0f9b", 0x400, r8, 0x4}, 0x38) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000001200)={0x0, 0x3, [@remote, @multicast, @multicast]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@map=r4, r4, 0x13}, 0x10) 22:45:20 executing program 1: bpf$OBJ_PIN_MAP(0x16, &(0x7f0000004e40)={0x0}, 0x10) 22:45:20 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000300)) 22:45:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000800003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r0, 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:20 executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x87, 0x0, 0x300) 22:45:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000900003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:21 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:45:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) 22:45:21 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r0, 0x0, 0x0) (async) pipe(&(0x7f00000001c0)) (async) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000f00003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) 22:45:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], &(0x7f0000000100)=""/237, 0x28, 0xed, 0x1}, 0x20) 22:45:21 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x18}, 0x10) 22:45:21 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r0, 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) write$evdev(r0, 0x0, 0x0) (async) pipe(&(0x7f00000001c0)) (async) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) 22:45:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'sit0\x00'}) 22:45:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000006000003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000380)=@framed={{}, [@func]}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0xb7, &(0x7f0000000480)=""/183, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:22 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:22 executing program 1: socketpair(0x0, 0x26d69583ebd2d8b0, 0x0, 0x0) 22:45:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="6ef1ef4a16054f87a442387af4", 0xd}, {&(0x7f0000000180)="a82fd47d96a190a889582a07826c1b2a9d100e7215eba9a6a7648fd0f28e69727a1b2a8dda1f77854eb671800a793e5f507ad57c96220879f3cf30b1bd52134c146e4b4fdfe775dca91cfd489508a141869f0669e7ca7310f33c1e97bce95e9eff23068418f8a12d39a9d3de7d3fab4bdb0cdad1b8367f04767315f6e39ecb8ef39dffa2408c438a4473eab503b0e9e9128541973309969321977f209506373b04677303904a4ca13730f5c5bbd66ec6e121ff", 0xb3}, {&(0x7f00000000c0)="40550ca318a5e27d39a1da6601150ec4012ad149379f0895f64caebb09a7299e2051fd04f0fd07a24048310c072241f8087edd44138cef1a4eae10d7e3dad548e4", 0x41}, {&(0x7f0000000240)="716005074b488f12c9fbff25b173705124", 0x11}], 0x4) 22:45:22 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000140)) 22:45:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000003003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:22 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 22:45:22 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)) 22:45:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="6ef1ef4a16054f87a442387af4", 0xd}, {&(0x7f0000000180)="a82fd47d96a190a889582a07826c1b2a9d100e7215eba9a6a7648fd0f28e69727a1b2a8dda1f77854eb671800a793e5f507ad57c96220879f3cf30b1bd52134c146e4b4fdfe775dca91cfd489508a141869f0669e7ca7310f33c1e97bce95e9eff23068418f8a12d39a9d3de7d3fab4bdb0cdad1b8367f04767315f6e39ecb8ef39dffa2408c438a4473eab503b0e9e9128541973309969321977f209506373b04677303904a4ca13730f5c5bbd66ec6e121ff", 0xb3}, {&(0x7f00000000c0)="40550ca318a5e27d39a1da6601150ec4012ad149379f0895f64caebb09a7299e2051fd04f0fd07a24048310c072241f8087edd44138cef1a4eae10d7e3dad548e4", 0x41}, {&(0x7f0000000240)="716005074b488f12c9fbff25b173705124", 0x11}], 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="6ef1ef4a16054f87a442387af4", 0xd}, {&(0x7f0000000180)="a82fd47d96a190a889582a07826c1b2a9d100e7215eba9a6a7648fd0f28e69727a1b2a8dda1f77854eb671800a793e5f507ad57c96220879f3cf30b1bd52134c146e4b4fdfe775dca91cfd489508a141869f0669e7ca7310f33c1e97bce95e9eff23068418f8a12d39a9d3de7d3fab4bdb0cdad1b8367f04767315f6e39ecb8ef39dffa2408c438a4473eab503b0e9e9128541973309969321977f209506373b04677303904a4ca13730f5c5bbd66ec6e121ff", 0xb3}, {&(0x7f00000000c0)="40550ca318a5e27d39a1da6601150ec4012ad149379f0895f64caebb09a7299e2051fd04f0fd07a24048310c072241f8087edd44138cef1a4eae10d7e3dad548e4", 0x41}, {&(0x7f0000000240)="716005074b488f12c9fbff25b173705124", 0x11}], 0x4) (async) 22:45:22 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb1, &(0x7f00000000c0)=""/177, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:23 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0x10, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0) 22:45:23 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a0"}]}}, &(0x7f0000001840)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 22:45:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000005003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:23 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:23 executing program 5: r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x3, 0x0, 0x0) 22:45:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='host1x_syncpt_load_min\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_clone(0x40000000, &(0x7f0000000b40), 0x0, &(0x7f0000000c00), &(0x7f0000000c40), 0x0) 22:45:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="6ef1ef4a16054f87a442387af4", 0xd}, {&(0x7f0000000180)="a82fd47d96a190a889582a07826c1b2a9d100e7215eba9a6a7648fd0f28e69727a1b2a8dda1f77854eb671800a793e5f507ad57c96220879f3cf30b1bd52134c146e4b4fdfe775dca91cfd489508a141869f0669e7ca7310f33c1e97bce95e9eff23068418f8a12d39a9d3de7d3fab4bdb0cdad1b8367f04767315f6e39ecb8ef39dffa2408c438a4473eab503b0e9e9128541973309969321977f209506373b04677303904a4ca13730f5c5bbd66ec6e121ff", 0xb3}, {&(0x7f00000000c0)="40550ca318a5e27d39a1da6601150ec4012ad149379f0895f64caebb09a7299e2051fd04f0fd07a24048310c072241f8087edd44138cef1a4eae10d7e3dad548e4", 0x41}, {&(0x7f0000000240)="716005074b488f12c9fbff25b173705124", 0x11}], 0x4) 22:45:23 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)="1a", &(0x7f0000000140)="ee"}, 0x48) 22:45:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000e05003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:24 executing program 5: r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, 0x0, 0x0) 22:45:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) 22:45:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x9}, @call, @btf_id, @map_idx_val, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd3, &(0x7f0000000240)=""/211, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000006003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000001840)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 22:45:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) 22:45:25 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x2, &(0x7f0000000c40)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000c80)='syzkaller\x00', 0x5, 0xf0, &(0x7f0000000cc0)=""/240, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x10}, 0x80) 22:45:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001a00)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 22:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000007003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) 22:45:25 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 22:45:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000009003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4}, 0x48) 22:45:25 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 22:45:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x48) 22:45:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000050e003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:26 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="e7", 0x1}, {&(0x7f0000000200)='>', 0x1}], 0x2}, 0x0) 22:45:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, r0, 0x1d, 0x2, r0}, 0x14) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, r0, 0xd}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r0}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=r0, 0x4) r2 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000300)='syz0\x00', 0x1ff) mkdirat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7f, 0x12, &(0x7f0000000380)="0cb8f785dc445fdbf1c2a278c64a112707a39617567103a5731c331eef6d58c506d7df2c4e2d657cc569bda46c5baec7493da7350587f0c905ed44078c4f9598ab36f7992ace7386d7092361233827390266bfd3525e56b645b5432361a1c98cf50b2f306568a011f1696ce4201f757f71bb0f1eb68d6a9b138fb798e06904", &(0x7f0000000400)=""/18, 0x4, 0x0, 0xe9, 0x83, &(0x7f0000000440)="04f332e8bfef668a099e0b378d025662a8a1db8a067149418827b74f2b054dadeee146e5a5d4b3ebe95255d3e309a1fe244a09e18722d2066faa6af0c29524cd5e26d1cd9d2b7581078ca85624019a17487c007c05408ed509b97a75746330f04e0c502fe79e7a1877fed6ac8e000ad793d183cacd2d348defe8a35ba09369a3590d48c94994a548754b67147f55b8029695f212fc37628f6143450726b284cce4b461dc0089e5d96940f1383f42a53eab8a088dcd28319444078e8d01781e8a38c08e12b675e24595ac9551d73ac6925e7c7f1c0b1960a5ed2826902722cbc59dc3b9115359dd3b72", &(0x7f0000000540)="ae4e685630d5650d5dec1bbbde30937c4fd2a64926350892ac4df075fa5aebaa6719297a6058651014b96517bc35404bfc19477d43cefeeec4c41ff111e589668472ab05e8c3dbe0f272f89b4008aee7d7ba1121141dca6083c99d69a8b88c9ef421a1a14cf40d2b983c4efc44e2e947962c93c0f8e0650ba70bfcc9f43976dcb8e163", 0x1, 0xe6}, 0x48) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r0}, 0x8) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000006c0)=r3) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.current\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x5, &(0x7f0000000740)=[{0x0, 0xfc, 0x1, 0x5}, {0x0, 0x4, 0x8, 0x7fffffff}, {0xfff, 0x20, 0x8, 0x9}, {0x2, 0xfe, 0xf9, 0x55fd7e1e}, {0xff, 0xe2, 0x3, 0x5}]}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0x8, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x10, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r5 = syz_clone(0x40000000, &(0x7f0000000b40)="b08908000a2be50ba6947fddcc1bffc7589b4f1a774aed8e3c61d46a6b7cf14d85f0ac88a1e1058e51a004e395014dcc8ce3984de69a43e859349087871575dbb44a7f28197cd4df3904e68accc55f64ef1cebacb398e465412d1271d8c09edab066f960b5adefa6e695a22b617243401efec9804790a82f9cbe02a74b8927416bb9f9c20954f369344557fcbf66cf7ef7e7a430082e69b5c21e27e93f0190c38348810ca44a19997a9c5998b3af4ef2c9", 0xb1, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="d80c5d8d69c05c1c620fe9ec") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={r5, r0, 0x0, 0x17, &(0x7f0000000cc0)='host1x_syncpt_load_min\x00'}, 0x30) [ 1206.181021][ T1188] ieee802154 phy0 wpan0: encryption failed: -22 [ 1206.188000][ T1188] ieee802154 phy1 wpan1: encryption failed: -22 22:45:26 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) [ 1206.222433][T20911] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000f003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0) 22:45:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) 22:45:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000060003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1207.189566][T20932] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7fffffff}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000001c40)='cpuacct.usage_all\x00', 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0xa, 0x0, 0x0) [ 1207.300318][T20933] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x5, 0x4}]}]}}, &(0x7f00000000c0)=""/165, 0x32, 0xa5, 0x1}, 0x20) 22:45:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:28 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x0, 0x0, 0x1, 0x3564b64efbc0dead}, 0x48) 22:45:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000001840)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 22:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x101, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 22:45:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x36, 0x4, 0x0, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}, {0x5, 0x4, 'DF'}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r1, 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) [ 1208.577649][T20940] can: request_module (can-proto-0) failed. 22:45:28 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000900)=[{}], 0x1, 0x3, &(0x7f0000000940)={[0x2000000]}, 0x8) 22:45:28 executing program 1: socketpair(0x25, 0x1, 0x2, &(0x7f0000000080)) 22:45:28 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) 22:45:29 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x105080) 22:45:29 executing program 1: socket(0x28, 0x0, 0x8) 22:45:29 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x36, 0x4, 0x0, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}, {0x5, 0x4, 'DF'}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) write$evdev(r1, 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:29 executing program 5: socketpair(0x3, 0x0, 0x7fff, &(0x7f00000000c0)) 22:45:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 22:45:30 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f00000003c0)) 22:45:30 executing program 5: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000005c0)) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x30}}, 0x0) 22:45:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x36, 0x4, 0x0, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}, {0x5, 0x4, 'DF'}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r1, 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:30 executing program 1: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)) pipe(&(0x7f0000000b40)) 22:45:30 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0) 22:45:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="03002400", 0x4}, {&(0x7f0000000080)="000000000000000000425ffed782a5a9d54cbfd0030048896176b821ee0f1a6c3ad647"}], 0x1b) 22:45:31 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:31 executing program 1: socketpair(0x28, 0x0, 0x0, &(0x7f00000005c0)) 22:45:31 executing program 3: socket$inet6_dccp(0x2, 0x6, 0x0) 22:45:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg$unix(r0, 0x0, 0x10000) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r2, 0x0, 0x4048080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000100) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 22:45:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="03002400", 0x4}, {&(0x7f0000000080)="000000000000000000425ffed782a5a9d54cbfd0030048896176b821ee0f1a6c3ad647"}], 0x1b) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="03002400", 0x4}, {&(0x7f0000000080)="000000000000000000425ffed782a5a9d54cbfd0030048896176b821ee0f1a6c3ad647"}], 0x1b) 22:45:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x10000a006) 22:45:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:31 executing program 3: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 22:45:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="03002400", 0x4}, {&(0x7f0000000080)="000000000000000000425ffed782a5a9d54cbfd0030048896176b821ee0f1a6c3ad647"}], 0x1b) 22:45:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 22:45:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ffffff9900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:32 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:32 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x2, 0x1, 0x713, 0x9c, 0x9, 0x7}, @eth={@multicast, @random="d65fb8ae99c5", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "dd632b", 0x3bd, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@routing={0x1, 0xc, 0x0, 0x0, 0x0, [@loopback, @private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x3a, 0x19, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x4, [0x307d, 0x4, 0x5, 0x6, 0x6]}}, @generic={0x81, 0x34, "4403f1bbe3f4b7c0a7962fef5083fdae42a97357524bef9eaafebee86aa250a25f757bd7d5b3d6d88ce87f137b463ec807013a3a"}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x0, 0x56, "9a0d2c84eb996b739b40357e998b0bf15ccaeb704254a831ef94f49188f5d3ad00a0148b9c8dccf3f43f4824168e335811a492b95c31524c07979f4fa4c78b6abf24340ea56854485ff42d0ceb52b141f61101930d73"}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x4, 0x0, 0x80, [@empty, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback]}, @dstopts={0xc, 0x29, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x41, 0xce, "ccb541377a2c0040c0c44469e626e0f9de5a4d26f6db029bb32751e7304e4c5e20b701b470d5cd9e891db6cc579441a67dc908672c952007e20fca47417c5bf5421b581dcc93758c0235d3cdc2887e88e364b22903ccd7d14a8b90a6922686ce61756ef7eaff87b2f84d29360af70dba3e57722ca5a45de9c19138042217b3a68f2c07b99b9a0fcca77dac428f93b00c93b578d7b8a3c0b9351730e6f0e6fe4834baa8328188f2533d5b12fbe80be00d27f560c0fa86a32aec892cac38cb830500f7171a238a1d9855ffe20be2a3"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x0, [0x7fffffff, 0xffff, 0xffff, 0x5]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x5, [0x6, 0xfff]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x1}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x11, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x37}]}], {0x4e22, 0x4e23, 0x85, 0x0, @gue={{0x2, 0x1, 0x3, 0xc1, 0x0, @val=0x80}, "86a83e3c10acf93b67e3654bf319b0e1bc01d15a5d19e77e53a83a440e8b8fe84f9332f325876b8b2bae9030a93948927624b8eeff836fac8b5b220bf54ce584aa04da7d36a73421e4ab93f216c52cbeaa45c4d77462cbe3885d78334e87e9f47493d876aa93dc0872ea569ef04dd5455f7ea11f51"}}}}}}}}, 0x3fd) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x100}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x16501, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x83, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{0x4, 0x1, 0x40}, {0x5, 0x2, 0x13, 0xfffffffe}, {0x1, 0x7, 0xe6, 0x4d}, {0x200, 0x2, 0x7, 0xffffffb4}, {0x9, 0x1, 0x2, 0x3f}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000009c0)=0x2) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r7}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000a80)={r7, 0x61, 0x1000, "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"}, 0x1008) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, r8) write$tun(r8, &(0x7f00000006c0)={@val={0x0, 0x88ca}, @void, @ipv6=@tipc_packet={0x7, 0x6, "3989a3", 0x2b9, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0xca}, @rand_addr=' \x01\x00', {[@srh={0x2f, 0x6, 0x4, 0x3, 0x9, 0x70, 0x9, [@dev={0xfe, 0x80, '\x00', 0x2e}, @loopback, @remote]}, @routing={0x11, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, @local, @private1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x5e, 0xc, 0x4, 0x6, 0x9a, 0x20, 0x67ce, [@empty, @remote, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00']}, @hopopts={0x2b, 0x13, '\x00', [@generic={0x20, 0x79, "9d891bb03118f67078addd503c9dbf6e7f715b9981c44a77c5cda5f645849f507ca2478416e3f664732f4db64399e527637410d278e3e70d0d8ff1bcd2c07c18d95429749e5c6378f89caa2d0d8378c98820b9e24f47c05851fbfe0871b9625cab34617a5421019af709b0c165d5e5795c72e905ba12494bf0"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1]}, @hopopts={0x6, 0x2, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x1, 0x21, "b9af19c447225945b9fbb032d585d87081e95fba8d55ed1766f84fd155404c6db1"}]}, @srh={0x33, 0xe, 0x4, 0x7, 0xb2, 0x40, 0x8000, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', @mcast2, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x1, 0x6, 0x2, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x9, 0x9, 0x3, 0x4e24, 0x4e21}}, [0x0]}}}}, 0x2e5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x8}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa0000015}) [ 1213.030124][T21051] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x0) 22:45:33 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x2, 0x1, 0x713, 0x9c, 0x9, 0x7}, @eth={@multicast, @random="d65fb8ae99c5", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "dd632b", 0x3bd, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@routing={0x1, 0xc, 0x0, 0x0, 0x0, [@loopback, @private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x3a, 0x19, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x4, [0x307d, 0x4, 0x5, 0x6, 0x6]}}, @generic={0x81, 0x34, "4403f1bbe3f4b7c0a7962fef5083fdae42a97357524bef9eaafebee86aa250a25f757bd7d5b3d6d88ce87f137b463ec807013a3a"}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x0, 0x56, "9a0d2c84eb996b739b40357e998b0bf15ccaeb704254a831ef94f49188f5d3ad00a0148b9c8dccf3f43f4824168e335811a492b95c31524c07979f4fa4c78b6abf24340ea56854485ff42d0ceb52b141f61101930d73"}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x4, 0x0, 0x80, [@empty, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback]}, @dstopts={0xc, 0x29, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x41, 0xce, "ccb541377a2c0040c0c44469e626e0f9de5a4d26f6db029bb32751e7304e4c5e20b701b470d5cd9e891db6cc579441a67dc908672c952007e20fca47417c5bf5421b581dcc93758c0235d3cdc2887e88e364b22903ccd7d14a8b90a6922686ce61756ef7eaff87b2f84d29360af70dba3e57722ca5a45de9c19138042217b3a68f2c07b99b9a0fcca77dac428f93b00c93b578d7b8a3c0b9351730e6f0e6fe4834baa8328188f2533d5b12fbe80be00d27f560c0fa86a32aec892cac38cb830500f7171a238a1d9855ffe20be2a3"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x0, [0x7fffffff, 0xffff, 0xffff, 0x5]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x5, [0x6, 0xfff]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x1}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x11, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x37}]}], {0x4e22, 0x4e23, 0x85, 0x0, @gue={{0x2, 0x1, 0x3, 0xc1, 0x0, @val=0x80}, "86a83e3c10acf93b67e3654bf319b0e1bc01d15a5d19e77e53a83a440e8b8fe84f9332f325876b8b2bae9030a93948927624b8eeff836fac8b5b220bf54ce584aa04da7d36a73421e4ab93f216c52cbeaa45c4d77462cbe3885d78334e87e9f47493d876aa93dc0872ea569ef04dd5455f7ea11f51"}}}}}}}}, 0x3fd) (async) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x2, 0x1, 0x713, 0x9c, 0x9, 0x7}, @eth={@multicast, @random="d65fb8ae99c5", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "dd632b", 0x3bd, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@routing={0x1, 0xc, 0x0, 0x0, 0x0, [@loopback, @private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x3a, 0x19, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x4, [0x307d, 0x4, 0x5, 0x6, 0x6]}}, @generic={0x81, 0x34, "4403f1bbe3f4b7c0a7962fef5083fdae42a97357524bef9eaafebee86aa250a25f757bd7d5b3d6d88ce87f137b463ec807013a3a"}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x0, 0x56, "9a0d2c84eb996b739b40357e998b0bf15ccaeb704254a831ef94f49188f5d3ad00a0148b9c8dccf3f43f4824168e335811a492b95c31524c07979f4fa4c78b6abf24340ea56854485ff42d0ceb52b141f61101930d73"}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x4, 0x0, 0x80, [@empty, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback]}, @dstopts={0xc, 0x29, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x41, 0xce, "ccb541377a2c0040c0c44469e626e0f9de5a4d26f6db029bb32751e7304e4c5e20b701b470d5cd9e891db6cc579441a67dc908672c952007e20fca47417c5bf5421b581dcc93758c0235d3cdc2887e88e364b22903ccd7d14a8b90a6922686ce61756ef7eaff87b2f84d29360af70dba3e57722ca5a45de9c19138042217b3a68f2c07b99b9a0fcca77dac428f93b00c93b578d7b8a3c0b9351730e6f0e6fe4834baa8328188f2533d5b12fbe80be00d27f560c0fa86a32aec892cac38cb830500f7171a238a1d9855ffe20be2a3"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x0, [0x7fffffff, 0xffff, 0xffff, 0x5]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x5, [0x6, 0xfff]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x1}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x11, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x37}]}], {0x4e22, 0x4e23, 0x85, 0x0, @gue={{0x2, 0x1, 0x3, 0xc1, 0x0, @val=0x80}, "86a83e3c10acf93b67e3654bf319b0e1bc01d15a5d19e77e53a83a440e8b8fe84f9332f325876b8b2bae9030a93948927624b8eeff836fac8b5b220bf54ce584aa04da7d36a73421e4ab93f216c52cbeaa45c4d77462cbe3885d78334e87e9f47493d876aa93dc0872ea569ef04dd5455f7ea11f51"}}}}}}}}, 0x3fd) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x100}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x16501, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x83, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{0x4, 0x1, 0x40}, {0x5, 0x2, 0x13, 0xfffffffe}, {0x1, 0x7, 0xe6, 0x4d}, {0x200, 0x2, 0x7, 0xffffffb4}, {0x9, 0x1, 0x2, 0x3f}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000009c0)=0x2) socket(0xa, 0x1, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r7}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000a80)={r7, 0x61, 0x1000, "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"}, 0x1008) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, r8) write$tun(r8, &(0x7f00000006c0)={@val={0x0, 0x88ca}, @void, @ipv6=@tipc_packet={0x7, 0x6, "3989a3", 0x2b9, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0xca}, @rand_addr=' \x01\x00', {[@srh={0x2f, 0x6, 0x4, 0x3, 0x9, 0x70, 0x9, [@dev={0xfe, 0x80, '\x00', 0x2e}, @loopback, @remote]}, @routing={0x11, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, @local, @private1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x5e, 0xc, 0x4, 0x6, 0x9a, 0x20, 0x67ce, [@empty, @remote, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00']}, @hopopts={0x2b, 0x13, '\x00', [@generic={0x20, 0x79, "9d891bb03118f67078addd503c9dbf6e7f715b9981c44a77c5cda5f645849f507ca2478416e3f664732f4db64399e527637410d278e3e70d0d8ff1bcd2c07c18d95429749e5c6378f89caa2d0d8378c98820b9e24f47c05851fbfe0871b9625cab34617a5421019af709b0c165d5e5795c72e905ba12494bf0"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1]}, @hopopts={0x6, 0x2, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x1, 0x21, "b9af19c447225945b9fbb032d585d87081e95fba8d55ed1766f84fd155404c6db1"}]}, @srh={0x33, 0xe, 0x4, 0x7, 0xb2, 0x40, 0x8000, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', @mcast2, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x1, 0x6, 0x2, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x9, 0x9, 0x3, 0x4e24, 0x4e21}}, [0x0]}}}}, 0x2e5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x8}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000003003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) [ 1213.870690][T21062] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:34 executing program 3: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039b63eac610b", 0x15}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0xffffffffffffff5f, &(0x7f0000002600)=[{&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000001540)=""/4096, 0x1003}], 0x2, 0x0, 0x600}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/37, 0x24}], 0x1, 0x0, 0x0, 0x7fffef92}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/160, 0xfffffeaf}, {&(0x7f0000000080)=""/24, 0x18}], 0x3, &(0x7f0000000440)=""/182, 0xb6}}], 0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 22:45:34 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:34 executing program 4: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x2, 0x1, 0x713, 0x9c, 0x9, 0x7}, @eth={@multicast, @random="d65fb8ae99c5", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "dd632b", 0x3bd, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@routing={0x1, 0xc, 0x0, 0x0, 0x0, [@loopback, @private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x3a, 0x19, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x4, [0x307d, 0x4, 0x5, 0x6, 0x6]}}, @generic={0x81, 0x34, "4403f1bbe3f4b7c0a7962fef5083fdae42a97357524bef9eaafebee86aa250a25f757bd7d5b3d6d88ce87f137b463ec807013a3a"}, @pad1, @ra={0x5, 0x2, 0x1}, @pad1, @generic={0x0, 0x56, "9a0d2c84eb996b739b40357e998b0bf15ccaeb704254a831ef94f49188f5d3ad00a0148b9c8dccf3f43f4824168e335811a492b95c31524c07979f4fa4c78b6abf24340ea56854485ff42d0ceb52b141f61101930d73"}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x4, 0x0, 0x80, [@empty, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback]}, @dstopts={0xc, 0x29, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x41, 0xce, "ccb541377a2c0040c0c44469e626e0f9de5a4d26f6db029bb32751e7304e4c5e20b701b470d5cd9e891db6cc579441a67dc908672c952007e20fca47417c5bf5421b581dcc93758c0235d3cdc2887e88e364b22903ccd7d14a8b90a6922686ce61756ef7eaff87b2f84d29360af70dba3e57722ca5a45de9c19138042217b3a68f2c07b99b9a0fcca77dac428f93b00c93b578d7b8a3c0b9351730e6f0e6fe4834baa8328188f2533d5b12fbe80be00d27f560c0fa86a32aec892cac38cb830500f7171a238a1d9855ffe20be2a3"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x0, [0x7fffffff, 0xffff, 0xffff, 0x5]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x5, [0x6, 0xfff]}}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x1}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}, @srh={0x11, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x37}]}], {0x4e22, 0x4e23, 0x85, 0x0, @gue={{0x2, 0x1, 0x3, 0xc1, 0x0, @val=0x80}, "86a83e3c10acf93b67e3654bf319b0e1bc01d15a5d19e77e53a83a440e8b8fe84f9332f325876b8b2bae9030a93948927624b8eeff836fac8b5b220bf54ce584aa04da7d36a73421e4ab93f216c52cbeaa45c4d77462cbe3885d78334e87e9f47493d876aa93dc0872ea569ef04dd5455f7ea11f51"}}}}}}}}, 0x3fd) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x100}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x16501, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x83, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{0x4, 0x1, 0x40}, {0x5, 0x2, 0x13, 0xfffffffe}, {0x1, 0x7, 0xe6, 0x4d}, {0x200, 0x2, 0x7, 0xffffffb4}, {0x9, 0x1, 0x2, 0x3f}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000009c0)=0x2) r5 = socket(0xa, 0x1, 0x0) close(r5) sendmmsg$inet_sctp(r5, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r7}, 0xc) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000a80)={r7, 0x61, 0x1000, "416d3b943bffbcc14d7d73e392c906fea49e0c95ca9572ad8ed2e7cb39b7bd1ef909d5745c76a50b846b6ffab325ab2a31061593a06e09cca33b86b7e1255aeada902b61b76f64e942aec540551f03ab88fa64877b5727b80dc91017adabff1fb8d75200858afbb407030015a370b5422ce6ff6292673c514d72932b50d433fab974fc12bbd3911e2aa8a9260e403354fa913bbc09fc27d0d904b5f9506d6e177fe9cf73c25d7dcc7b957408c275c9f39da73fc289318df31626bfee1a6938bb3d6a0d526c1db69f54f18dcc93972e34995eaa07551da23602257f8c211227652a28f072dab6712b5eddb968ffe9c3b684778218c59f4619ded8d2f5a0078ec79eeb88cb93739cefca8f9ac030bc7a40e141f5d79361c6fe2274c7bdb93e5afc14e57080faa1bfa1f7b8e1b76f9fe97c01ff20ce07cdd178e8bfd971ab107b24da7c452af2c1039c043dac14fe3cfdc29fd8a5053ff9e9814605463449a9ca8385b7d999be38ee22cd2b9ddf7387a8074e8e1fec28de6d76a62ec24b16b00799ad3d99123e94c7787fca8fc0f438e057f0954dea10a092680f965595f4a627b4b24b7aec6f93cf9defb6822f7297c712c41b09b24a3e7e9b7a7fbf29e08e38ba30f6f85529e24babdc5981e4d9878a8680c53158d082873bfeb6da697a277aa917891eebe001c17c3beed468909f4c0961b4f427e1d4e2736bd2f20c2c61d676c184aa376d10557d57dc6f93f8a7104a258786de1f3365aa59f75106e6c5dcf4c10611fa75541cdaaa3288c2b9d01a27a180ec4be035002a5112fc463227632ed763b4f13ee9085e3b734b515ae90dd19480ce8f09ec21023127563557dbf33f30db6de004fcba37ffb9e9d9fe4fa76e21914ca42e31e57df4b4f7d79731a6a21124037b62cdeaf2e215287670c1db389fc2d03a8147606bb4068270e64e23bae71cf705597589d417d5d7abb4f752b0af16d3f544974bdd6700ce2fda71b680ea161c8f3c45f3869e7b95639995d064a12f598abd6633981d6f85d2b90d8244fa7cd7ed2c61a0b1e4a7dde9a9ae7b753a534627e707d29a80f0e824d6ffb7cbf23127b6855fa05d09dfdab582f555741e01463468fa036ba417ca8afd31624eb433d9f2fcd5d3ba9be6c3e59e15fa75536b0e6718178b1fff29bea9d5e136454f92f3c60152615e080a7afb30f5dee7a55a7b7a908402e6360e69ec59e8b1acbc1d4c6203a5dbeb92cbe887f2d11cd58025b20041cbfaddabc677a318594cbb5492124646eed3dd35d66c667781ada7a231f20b493445d2b1bb87d486ece6b5b5e4edc3fc84e365a8601a81ade411c2928d2137fe43f7d0da5d0a21547f7bd86788af912e33b9190904e041b78279040f0a02446daabb99b461c6ab14a02f7ea23b42971f84deb363ad30790b996472d94867e88dbec9b0483a3dd190d1632dc1b540b6bbb7a5c251021f5abb9d117be7fce471f503fa1adcc808bb43bab0856a16567016b3a5dfc526fba41187b7e314e68baa748411d27075503e0d19be11ff7157ee69d994c60ed4914f4921eb97f944b9d59ae3c5cc30fa17a65d076ba06c5091e98ae5025ac3a6a261936a33d73442fc6b96684f34e2e3d2cf4ccec5dedb921f28555ea5a40f338931733281ed3c40def37b461824ef321c9e8edaaf850a562231f451928146fd0de1be94bd7b358374f6af1e86158dfe96725ca023419e006d2633b97af68ac3370871fbee9d6ab32cdec314b0aecd00db77725d258b2812856512589d9dafddd7376defd9ce407376c3de80ef93b9e61d16c82e534c8ed14dc05e1792e18520e5f2c9e281124494aa844d07940cc21f32facc711dfc91038b20b6e88a9995722ca251141e51b5c3a114d7494cc34e4bf9b5b194cbb25fecd4b80c1535f57a4e5efaed898ef96446983ef63c7314b7f6f8674e00edddc920fa3e343a41ceab0baf999cb27b89a1b384fae38d51a7718d309f93f6b8e80a0d35f8416922ea1ba6c971e44744184ae9fa3840e07da5cecedc5f13a978d0802f07df45dda4202f6a2e4d936cc255e086d1b3b6f738c990b0e966ca6f417a9882e5789b8b0918e0758689437976a4665000aff12e9626bd01664f61bdb7422f7cfa72cd96f1e6843a6753f92005c7bc1b1ecf99582b4f5936b15e2353a48eb32d367247c2e598f4d367cbfad9f1e6d9b0094c0455e76c3e90413a7144bae99af425d9b706209e10a360e97d45762d069448f9cb72813efa5c1d40428192c18df75bc199b6fcb0707fc5044e1606a5fac6d46276d6c67e2fb71feecc50b74faea4fc54f69bfec417d751b4055f7bd4daad91ef422e551d97b4c7f3534c37e6a0f7249bae896d17ce6d3142264ad9cccf96b8aa7d523b93606be4d68aa258448aa1d86411d4a78b795f1d2680fe4171153904a1c30ba9d51b46118b54ff0c2fa6726f5b98b951fb6f33117dd0fe4775bd94ed7be1ebc0ecfcb345d358095751368679560d97d2a6594733da82e2abf3830e6f76b8e6bbe118a1d8f52ea8a5101edf4d12202cd9714c66186ff2e1cfda122823e690ced772978b45c46c1e1b8fe647d63d067e4c72307598b23660e1249cc7d3e9ed68b5ee9eec1ad247a2d19f3f8cf95a526810301bd2948a2f1c4fd33403ba3a418949b6968e958d32a26295764787337908b74c9e14a9e9d14e62fbe35929495b8ba7c1e34ad11d26235b0dd866ce48d7ccc7eb90c3561908729eecaa410cfbe4fa4dbc62c722e3d6f2fc39b8a34ec4bfb247b5e2bf66d260199cbd8a22e0cea085e95e8272c76b266edc0a910f7738dc04da55e0cbdfad3dd089ade22b6c53e9ea61c389a0d2a47389e65183f28d2fe503d6db92c524291a9d22a13b31beb9368a3ca17436a64783fab32b238aeeb5535d07ea4c47ef6c62f0fe8696ef93030a59f56a2235cde3df335b675cf7a0bf729ae6b8e81d14893de2c281dfe7f6c76b9da40a7397c5fa6feda311a1973aa07fdf4f3928064013f24d698dbb5d5b93b37db76967cd30b7ded4aa03016b7602fc27213d8afe59906723893c457f948b886175f6dcdf4f1b2d8b37fdf00932e1507c29b86444334e639c5062a2216099bb590ac248ad04999a9a332be40502a5b2e1aabd3b28cb71fadd97f7ff8d05c49b8631766d01ad322217694a628777d6699f4a0035d327cccba243b7b823ffb9673222710aa7bf33fa75b629a507c61add57012f31bbe3f9ef4d56b5e83b9d0a8120973647779caecc72e1ac421395d08ddd16b600925c2745c56bc864282cb2c0fc3222315dd2436b6f1fa5f8064b2cbd5c54659d33b29de126a819fc4a7381aa3287e26b2df06d939534f908593e035e3e43fe51a77247dd1ae1261f110df3863ac168db01fb6ebc985d876d08707bbf8def03cf7f3d2399adaebc2b245207d0d499b9c8d0c2c5af82b270831bbc9a0ad5d3a66c7591857b0fb0d4c4c3f31f4a056ac8a57f167af0343c90ee9b7cb201cb8a2694dc3833b5e96e682e9f3f442efc97414bd1b5fe135d720d3f87c07fcd52d2cf8b16eb7f8085134da38bd0d26211602e4b06f04df027b01c1e866cd7862f1db33560c1c7a59862606bb102ab152a1364f7549ebaebec860f5837005dbdc9d679f5ae49fcc868306ccf22e13655763c9829c8fd839522d0fdd8dc6108b79a5213ee100b1014f51c02d0655934161e20de056fd82627c8782c0c8a795985800e19a88f570a0ab5366f2bc612748d9bdfb835f7eef541914504b10ec660508d250dafca6d5e5fbb1ef477000c7bd5b4f711399c631d56f5140ab4cce4c4a2b78d82d7dd5900a87104925779e32837afdf473d317001721f21516bfe6372fe993f93cee59309c75ac2f7ee492f2f30b834f1f4c593160860ed6fd3a5a13c6b503a213fa5611d219c99b78dd31249e04348afafda32190ab7820357d56c214e8ccac5727e5554ea4089523d7e1f273091f1656039fa5b62d8c346666e57b58cbfe74f8cc3c5989782e3859d5efc9be3ef40437ba3e06c1331b392f346f94bd5a077716c5095c925d9d98821d896c83bd90b5cbbad430585ca1ec2099780368b184e5199e869c8737d7d6168a994fb7a1db75691453e237deb627982c097a052a451e04a911f34bbad5aaa2cddc0865c83b0566b810ed9cd7e6117fac22cc9d72a1a9445ec3a4444ff0e1155284e8ef7299af8b0c84aec95dc6b0ceb957c41667aae30efaf784d1c5346416378f1eaadbf021b94ca534fa225e22fff5ec5efbc20bb047132e82dc3b61c189425ac7211050903f1026b11a0d30c1dd34a6d1d1eb4e9b424415fad28bb8b46c74af4b627b9546f4489f9468826d077eeb93120f3bab88541986db045d040f2e5a5b385b12401332042c1d9f50990230d5dddcaeeb6becc5a672261f1267e561dc4185b5c36cec2785c9d85f0d5f5f70e8daf1cf7588d41bd7c75e99de72b8a740c4295609f7c46a538a355b4f98cd699680652c55097ac04db41068cad57319b63f7ed168f3c7aa84814b4568baa33868de67720af969e67769222ceea81317c54f643e8f7081f041e12610cbd2c1a9bcf81d40f0642428807d354a2cc4b96d3fd0a0add4633e328dda5b9de6257f74f29d84277d3ccb1e50228b20bc01959300cd99aa4b331f5a1d44f3f22d8c1d1e578ea4e299e87e1e04b021382a4666496b672a5cdfefb27e59442d2cd490df6452bbdf350664c2354d793c1a14a1ebec01de862d928acac4ad5af7510323f149787e21ed5eb4540d8825fe2768fc11ef620a7be0d36656ea78c802d19732ad52b8ae567e827fc4141ceb088c5792732762eb5e0ade8beed7ab7d7d7c2612e92f9cbc1cf5548ee09096bd03ad8987f29359604ea4106941350e54755383f3f4b7795afcd8d8e01a9cb3d113a8d3013cb0b1c5621512c0b514cab7c17ededac8ac9fc8b825b3648a1086ee686df8a1f94c430cbfbf2c65cd487c72b50400445ce576b9d5dae2f267d7447126166390c84d50faf35c5272a3833f3dcf6316cd8141b5dd5b1c4be4877e1dc18943e30ea17f93407e277c39737a92b3898f0edb151fa13f8d8207b2febd75ee25e25138b706f37156bb25281e1eda82735e6837a1e1d850ca582952c1dde3302732c2d4bd43a44f9f323dfee37434393ffb682ac9468643dc672f7eb89af073aa8e8a4baf12020400d203c9641cb3a1439af96f115eca74ea99b656e0086e8681da703531438ac5173f3567b0f4bca44c64469bb8c871260f2a000d2ee7a7346397cb6955d0f90f00c045c517a0568c3010f83282259bb394d7ade6dc8cec19419ff187821970c92ec22d77ceed9abc39b806c61b8fccb82904c897361afc9ceb7fe9835e0314e58b4eceba9cec589fc68ec116c9312bb86d0e45cc692aec516abe0b29e546912a0bda8ccdd4c95f33e25516a4b85e67b0817e8ba051f3f7c80db643b83854f051ed51e535e57c87d17c1c07d0ada9947798d3e7f0467e3165b33f600dcab2af720b058b48acef12e72254cedff314c25932291abc0cf83455716a41ce7434ada090ac56e1fd11ef1d907f2f69b001cdd1391736d60eb185efcb584cd55b133d50a28d14712b9d6365e794fe717eb9b1aca275f39975391abacba560587b2ac2fd06e29066e797afaa05fada78cc1e7f5f8d833009d9348b6f0897b37b69e500f9be73639cbe880a699577b2eaa71ec59dbe83410e08559aae69c34ff96964e01b5c497e09dc347f71f06f73ee3ad75e11be543ee94740cd7c38a9900dd77b068ddd7fcefad133d2bdd03988c3d67"}, 0x1008) (async) r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) write$evdev(r8, 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='/dev/vcsu\x00', 0x0, r8) (rerun: 32) write$tun(r8, &(0x7f00000006c0)={@val={0x0, 0x88ca}, @void, @ipv6=@tipc_packet={0x7, 0x6, "3989a3", 0x2b9, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0xca}, @rand_addr=' \x01\x00', {[@srh={0x2f, 0x6, 0x4, 0x3, 0x9, 0x70, 0x9, [@dev={0xfe, 0x80, '\x00', 0x2e}, @loopback, @remote]}, @routing={0x11, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, @local, @private1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x5e, 0xc, 0x4, 0x6, 0x9a, 0x20, 0x67ce, [@empty, @remote, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @rand_addr=' \x01\x00']}, @hopopts={0x2b, 0x13, '\x00', [@generic={0x20, 0x79, "9d891bb03118f67078addd503c9dbf6e7f715b9981c44a77c5cda5f645849f507ca2478416e3f664732f4db64399e527637410d278e3e70d0d8ff1bcd2c07c18d95429749e5c6378f89caa2d0d8378c98820b9e24f47c05851fbfe0871b9625cab34617a5421019af709b0c165d5e5795c72e905ba12494bf0"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1]}, @hopopts={0x6, 0x2, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x2b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x1, 0x21, "b9af19c447225945b9fbb032d585d87081e95fba8d55ed1766f84fd155404c6db1"}]}, @srh={0x33, 0xe, 0x4, 0x7, 0xb2, 0x40, 0x8000, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', @mcast2, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x28}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x1, 0x6, 0x2, 0x2, 0xfff7, 0x0, 0x1, 0x4, 0x3, 0x0, 0x9, 0x9, 0x3, 0x4e24, 0x4e21}}, [0x0]}}}}, 0x2e5) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x8}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) [ 1214.668519][T21078] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080fffffffddbdf250000000006001b004e2100000c"], 0x28}}, 0x0) 22:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000005003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="8e0e9b63a02b6baa0ac2b0553604f86554070ae628e3", 0x16}], 0x1) 22:45:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000006003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:35 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x92) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050400)={0x0, ""/256, 0x0, 0x0}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup(r5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r4, r3, "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", "eac28d9cfb0ca133043f30cdd4b0501fdc76e859c8e473a72b13ed638cf1ae088a95318684b2218c0dffe132a824a081cdac5d210160dd1518d5b839e0da1dff5bfb29919b67386cd378a0f2b3f75374d7265a1243611de67d984468f0afc7d16640af20fd19851d2427ca1a898a6966d89d0654b56884465971ec2ed92c3be0f35b13bdf3e03c7105f3577723a545fdf6287a41899fdbb95a3e6ddeabb5965b7bcc8afe0eceb59a4704cdf8a95cde91e5164e1078838fea83c8f736cd99a60aeb8951e9b6c411db30ebf7a37ff7388015cdea0fde4bbbc65a43ed5df0431e68b1c71b98416aa370e65a950a32d002a03a50487dcd504492ba39787bc18b884bd23e7fca3cc8031431adc28ae31609e6082e5233a40de053168b843077f13d41319ea21ce479676da215413eddf0d231080c69d9a77d229dafcb2bf888c3ca2cfa15b03c9320cbcdbe45bd788a067bd61f75d5b83047926727371c07ac55adaf8ca5efc8149fb82ca7e73e2ab8db8c3733aef38894a244795618c0ff1becafce7dc3c616d9a8ff70104a68ffd921e3b3ce0cabb6de49ebea6d5e9e735a370a440c6d0c664c8ec8d07d83daadb560c1cbae620ce53103072bb45cd3742652c0a1190dfb3f4f6744537750d4e2371a8952749a2c8029eb7bb9e79710c9273fe5f9b544b084e5f03e7b6e15020b829315fa879f9418d005547f1091e957f1a3318dddf3770eb904c4c1e473d35f6c6aaaa2a662c938f72ada00f58db126d326c538935217e2e8c06e694c1438a0d33ac38487b1d3a2b76a95b6e33d8ba96e7c620c09fcc45c609ef49e7dcfeef8addc773d9a30637932f1078806e807fbee1c996598ad12d0c4d17b97a65704f1b7fc758a2675feb8ad8746e440944acb1b66e416cd6435783ab62f5279384a6823bc6e7d7bdbe5c776b7be1745c98349d9f6203eaff89e461d16b6bf630d50526badace26a67804fc869744569c2ecca5c7d32270b5e8309feb6212c537f765cff8fb8993e1f62b1a7d4ae9dc4647fae0f72fa7cad87571f61665d81ad3e0e336e6c3cdb2130853a24c0a999badcf4adc119ef90c7129ea3e686a09b84dd8a93b3d03517a32b03ef9249ee488adca9a0f91274952bf74c7ffd09060bebec31301e0ba7db057e61f62ea486c8ad397229e3f2a3754ba34a150d5adb7c107948bd7a711d9c5d517a92ada530aed7f54ab08436274a7b19fa9f4135053936c873eb12f803a194eae1b6dea52591232b877ce3f53ea729c891e33114f5e9fa81d328bced98ec22373eddf55d53de1da430d22ceee969922b1878e842847c5d03410d4f55cd40b485b0ce8eb07eddf68014fda8185d38875a2f95ee80961c2ca8eca4a6e8b565d6fee617ac42307744137e9249af5e365c05363b59a744bee72d6358cff226c989583e35694d51cadf4cb2696b79b049492d97d2c8ec91271c9489aa0e83e49ef3d4f7cfa6edb255f85752b1e573724e259f6b5356d69c66985fbfe0bb8265e82f5778756b78c3eda3fcb5586f03045c1fb60346e66c1ff5deaf45f5bdf8ed2b14e0bb1a1a61daec0df9d03a60abfefb90d460349671671522ab54b71a2ed8cdac4452f1ca1c36fac7e7ef4612d73197f4accdca764d0f72a55ccb5bb7a679c558fc6b484dc7cad927852b42a51efaa1e8e6949f7beafcd0ae0c9dddafa42b8399f5a44a69f0ca8b6564fe302ae9ba66eec65574a009472535fb71ccfa1da283ad8612dc1d3565d6b07674070b8afe83ca0b7621cddb95a9af8e7ba24fb82cd91242cdacf217be8a886b773d4ff030d6c1289f5b4c200cb4d8309f1d16175b1ab1c97c5f3b3d31fae9085fe52740aaeffc76def686c71905d56eb451419e0db06d87501227047361cb180dce53b6ff12708677dadcc8fa702cb23024c5acdf268da5f128069005d9d1d35d070ead89b43db283a1a1bafd5eca988d830a95c3a22693c3f27d84b9f2f1cc4c4eca8fc303c5f8c44ffbd02822e6f8180d52b9b3371655a2fb6efc16bcac1885ae4e5a1bc568a21178a32943db537043a5b3c2bb57f263784145ac98d4c5f9bc2114d6eea69d9395e6806f290053d94f11292d8b4f51cf7c341ac69a6b50bd7754c138c4cb4b3f6944f1131e6058839f30f5a37621ba09e86c7f21bab24ddf61a8913921be052abab6ee76941c8dca78c7921c31e45b72f62d0ccafd0234ed2d4735744fe375e05e6be0d2595ea2d5ad06cedda681eee38e8a39b63e5e185401fd019fd569b6a3c2a9ba6cc35b8e2f70ddc07a7f896aafbce1272d92dabddf1b9b9d76f628542477b91497b7226e5b7d6b8af34b7c8934822a8f530ff5b51c4972f77ce4e84191e71ac819eb5251b0ad07d12f78f25b3e6e2fc8bebecc1e9c5187115716d3ed199b89688df2f46bf20d43a73b8530a523bd2bd97d1551d523aaa451b2bd4b2b53970eb2acc2bb7f1ab1d750eca49aebef856003b66af0e8432062e95bc57ffb1e99f381293840c71b182ffb3bfe1cc7b788b70bbcec46e684c5444fef455f084ea864567cf268bfeabd104cbcbdbbb4aa7424a6b901f9808cfaa3b04d831fabb1e7973754ef32fea6b92764d8f7fd6987bd7ca045a80ad416dcb991cc60718c64045b66ce5feeec94f650b52d79e7ac8450b4c179f64bc6056cbfcdf15041b10a0b080134e16b0a5cfc32b2f991a7f1d084b3f74692a02bce41a5ac35e347f3672b08f1a959e563696d8a11042d526f92a40f1f3c7ab66a5f7f00bdd042e879d3184af8c22feb7e4ec11634f07da378de41a21a6e67c3c7c9f91cf030f0c2e229c55ee6d6dcdfea62a7b5391454e4dfef4515936c9eb487cb697c6613f06a93af3f81302cd951e90050721b9c92dbd49e1a08f097e5e4584dca6689160167bfd9302be14f983fb6292a79070a4738c3818fed10ef50b7627c0cd1e73b635a4e4a90f494d0ba55d3d09d24d13c9cd4ef28e5015dd1bf3fef76fb7b6029a4433dd3cbaf8fbfa6018e7347d25d08ee1a7a75d0847d2081adce4d3c8789d7ec7f11663a3f2b559583153fccffdcfed6abb4a83817d2ff36165837a332a602dc0688503c648551a43475d9d40f8253b6d12b81f264bf3007723965676f2ae66ee4f6313c5f7be39809e5da3c407a3d5aad9736b540788b9cecca99e95f8d2a18d1c8f098563ad190d61f453584103bad79f7645354b2f6cc91fc33d59e321efc9676c60a0e2f7fbef06534d33aabde064ca801df073feff8f7ed3a8861c9316f7ff570278396e28b51d7669072a10f46a78a7c050aa8f6a16d6361cd7b2bc556738b5b90419ad3aad0d213535cbe8bd54e4ad4aa94abfec1a298f332867f96bc97f3891b662a9511865b08a5f6b75e466cfbc58ad76c7b068c8553b896c1a268f66823d927006f8940978c5e89444692a029868be1f82d4f151010e27d4c5f1e815d9b3f6f6bc23235bc125f080b9e00468d45ccdca92e5b794b529265dce2c443362fdd58321e1ff4062fb61d9ca4cd1a6846e6fdd8722f5e0e529a0a31cb7e0bb7a23eb6745af6a749c7cb9c581ed209a24ca48f9dcc72bca460eae1b9f383a1e0226d45fd0cdb30fb6abee6a360706c281bd5294baa36294fe435900beec7801fc14cd7ca6edb7645af51bc5147d5e75e371342f1fda6531ad08280a392d229d050dbebe184d68bd00a1607907fa93562d17024ae3987329c3b8fb970aef669fd8955dbc0844faba2e9654e22117191350e910cfe107a6ad3266f2e0db8c505452bf06c2604bbbcb5afccbfa109db2b78f811ea165027ebbca45e45c4a7a1e1ebb97b1fb2b28222e6ad35b3b9e8340da9429d9c412a0121abb88dbf31afe13d1a59f55b9c502fe9ed9324f06dcafc3eb806b35a79b4cced4143b740f48823df81a38612536df6459ddb517609077733b3f0ba11b6ab704fdeedf9729f35245a5adeb02ae04101e895786f6c3470c5ae22d3872c75057e149563d9e9cd1244669d647a510de3b31b038c24b0cd659b5fb6d401c562675ba50f2f0edee76a189ed8f68d4d1482d3c598505592bb500bc98e24a48ee2ad16d3bea5a949258d1620fc6de09fa36c2aec666f753b9876fa9f6bdd9195cab97c3de52b4b2f7f929166015d9127ef8a6151d06398113d545f50824a359963c7711e1d822af784f77c66860839abbdc121f9fe10001cd09af6ecb5954e261e73551b151934b54975802796c4a9c83252b15d2a50ae451d771bdd03a53061d7a2dcb43da529e693d5c16562922db4c902f4647aa0cdfc8687294c650d847e3fa283065680589ed62788d4cff35f25d3e8e02d613ef50410a07cb2a027bb5a593cbb4d3b28de4b4ef9b4fbdeff2bba4b94f985444b80758d9a2dadad846252c33c42c26e9e96557b4c705202f48b761f580ea56ddbcc67fdb973bbeb7c862b1a863e772583310f863ef2ececfb69a29abddd123d7d8b4da996f93f3bd2972b49d99579d09cff80295ff61a60b8b45b03a52fc2ec37e89c76557aef9e159f822495de7c2253e43ba3107d2fa05d36161e3a524129348abb772e2ddf38f72ce8e545f3bd358eca70cbc703f3750b710eab6d1ff8047b6757c7bb06b63528d1a8d8adbd8583997fbbfde37d6008f4115666935f92640965cbef6e01395d737d4404f0eeb108d8e591a328681506e12c3631c2c56ab48b3412870a3431176c8fa050d50a8be5effd27b4f2dd970b958358ab8825a8e05f184c164b386d01925aa46e17823ac9fc8b75feb07aae503396b5bfb981e09dc0149f5df2802442bc06412190a7ed92664d6b9d2214ce999ca7676c1b6fd4f095ef667f4bed14bf7428dfa719d272751666585fedfc97a4b524a40ffdf59906f54ccde6c4bfadef627d16c35f4b3ff2fb16cf068ff352e62b62b305f85b77cd77e69f8caeda0b5445ec18c3340d11e7d37daf488e4e2a4c1896cf540f315a2cabc962e7c6666fd007a03cc827aa04234faae7e958220813c74fc0323afe8de81cabbc0f5c33ffab3e8d741ed7b17d158f01e9c26cd58742971f3b0525eaedc209f4b62c99141eaa54074aaa86dedb83e8407d880732cbf6c034c2f3023234dc94341b9fcfcfe13c3bf65afa873d624d0a46ab22d7b09aff2f4623a7637bfcdb96f812fd28fde0bbd5b2d65843c0d760f65eeac6e6c74f17a2e2d92901bd092b886b5e0b1ad4b4f555f600a32868aafccfe13e5f3346cb14eb2e7374a09e17bef68cf4f38c9baa1b0607e8e151bf63389c4bc81a5617c1a27bd89c6fd205b81bbe6213897a4adecf6d577d3a447081fafe866cde7e9bc707bde887d6a1474a8f7320264641cd89fce344e0a9ea8902f62c2cf2c2dee0c6278563a4e2f7ea973c0bec213c6348c01db34a745610b721e0cc584ecc8d8cd35de154abae7119dbb19f4a7917f04b0e"}) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) io_setup(0x4, &(0x7f0000000300)) creat(&(0x7f0000000540)='./file0/bus\x00', 0x0) tkill(0x0, 0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "285c4d007ecdfb"}) socket$netlink(0x10, 0x3, 0x2) 22:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:35 executing program 5: socketpair(0x2, 0x0, 0xfff, &(0x7f0000000000)) 22:45:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="8e0e9b63a02b6baa0ac2b0553604f86554070ae628e3", 0x16}], 0x1) 22:45:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000007003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:36 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file7\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) 22:45:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000008003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="8e0e9b63a02b6baa0ac2b0553604f86554070ae628e3", 0x16}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="8e0e9b63a02b6baa0ac2b0553604f86554070ae628e3", 0x16}], 0x1) (async) 22:45:36 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x8001}) 22:45:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000009003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1217.066540][T21138] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 22:45:37 executing program 3: pselect6(0x0, 0x0, &(0x7f00000003c0), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000380)={[0x8000000001000001]}, 0x8}) 22:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:37 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60004010) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000f003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:37 executing program 5: mq_open(&(0x7f0000000000)='w\x8b;@\v\xcf\x9f\xd0\xcb', 0x0, 0x0, &(0x7f0000000080)) 22:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:37 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60004010) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:37 executing program 3: renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) 22:45:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000060003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:38 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x92) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050400)={0x0, ""/256, 0x0, 0x0}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) tkill(0x0, 0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "285c4d007ecdfb"}) socket$netlink(0x10, 0x3, 0x0) 22:45:38 executing program 4: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60004010) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60004010) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x12) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) 22:45:38 executing program 3: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x3a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1b, 0x0, @any, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @none, 0x20, "38913feb05b58c5102d5408ec34143970ed409a4fb0475496c86f1ef9c964371"}]}}}}, 0x3d) 22:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000033900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:38 executing program 3: syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x100020, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80f00, 0x2) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x400c0fe}], 0xaa, 0x0) 22:45:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000053900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syncfs(r1) read$FUSE(r1, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000002800)=ANY=[@ANYBLOB="180000c2aacdc17c1c000000c6717ee8015502ed3f0268d2050000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, &(0x7f00000027c0)) accept4$vsock_stream(r3, &(0x7f0000000740)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) dup(0xffffffffffffffff) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r6 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80c01, 0x0) write$fb(r7, &(0x7f0000000100)="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", 0x1000) move_mount(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00', 0x56) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='0', 0x1, 0x3) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup(r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x0, 0x9, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x8000, 0x7800, 0x4, 0xf8}}) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000680)={@can={0x1d, r9}, {&(0x7f0000000540)=""/240, 0xf0}, 0x0}, 0xa0) fallocate(r5, 0x100000011, 0x0, 0x2811fdff) 22:45:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x4, 0x86, 0x98, 0x2, 0x3, 0x9, 0xe1, 0x40, 0xe7, 0x1, 0xbfea, 0x38, 0x1, 0x5eb, 0x100, 0x8a5}, [{0x5, 0x6, 0x1, 0xffffffffffffff6f, 0x80000001, 0x8, 0x8000000000000000, 0x5}], "5a25efe865cf4cd8ac0cfe4dbd712d30a917b296b1b698f8ce11631d0a92a0026565341347cae714b2ddf7d839807108be83284c562f7eabd4c117eca7024845cb8b9662a87bbf32c18d381a520b8116c096b232b877aabbc032d0e60df6d749a4ccbcbba3afa0fba553cea0db28ff86cf452980d798309ce14206e64cc3bced8aa159d89e1dc4713fb42f35bbb4b14af6f11389cfc2c7a362d5f2ca47f8d411894b5b1844bc65e6d91135357170680842847b61886fdef98b65cc55a2811fe75c9003cf43c8c06893b0fdd49cfd4d5ee8760ecd578502473747d706e91fb0fcca", ['\x00']}, 0x259) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r6, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ac0)={0x401, [{r138, r62}, {0x0, r339}, {r250, r206}, {r42, r11}, {r324, r30}, {r7, r246}, {r145, r189}, {r349, r215}, {r99}, {r185, r17}, {r371, r303}, {r168, r122}, {r40, r267}, {r302, r222}, {r230, r1}, {r148, r296}, {r331, r179}, {r312, r13}, {r280, r286}, {r252, r123}, {0x0, r336}, {r225, r319}, {r4, r369}, {r260, r170}, {r31}, {r308, r213}, {r48, r17}, {r204, r296}, {r137, r79}, {r282, r210}, {r326, r28}, {r136, r120}, {r22}, {r256, r68}, {r172}, {0x0, r376}, {r223, r60}, {r361, r251}, {0x0, r347}, {r154, r222}, {r288, r8}, {r335, r341}, {r357, r206}, {r143, r255}, {r20}, {r26, r372}, {r338, r112}, {0x0, r17}, {r304, r189}, {r236, r298}, {r211, r231}, {r185, r332}, {r115, r367}, {r240, r299}, {r58, r317}, {r69, r294}, {r266, r261}, {r180, r81}, {r173, r157}, {r207, r224}, {r169, r337}, {r139, r155}, {r225, r23}, {r128, r334}, {r131}, {r258, r118}, {r156, r372}, {r131, r219}, {0x0, r15}, {r217, r290}, {r154, r38}, {r94, r376}, {0x0, r163}, {r108, r233}, {0x0, r301}, {0x0, r97}, {0x0, r360}, {r371, r286}, {r75, r213}, {r282, r27}, {0x0, r68}, {0x0, r116}, {r26, r345}, {r205, r85}, {r42, r321}, {0x0, r13}, {r349}, {r271, r53}, {r310, r369}, {r293, r27}, {r245, r132}, {r375, r265}, {r4, r215}, {r227, r231}, {r124, r90}, {r14, r144}, {r353, r104}, {r160, r272}, {r338, r356}, {r346, r118}, {r235}, {0x0, r38}, {r363, r116}, {r282}, {0x0, r277}, {r148, r86}, {r359, r127}, {r273, r352}, {0x0, r88}, {r164, r241}, {r40, r253}, {r211, r347}, {r141, r381}, {r72, r183}, {r254, r130}, {r77, r323}, {r9, r231}, {r29, r151}, {r196, r116}, {r318, r92}, {0x0, r315}, {r242}, {r314, r226}, {r78, r21}, {r240}, {r262, r113}, {r172, r25}, {r61, r97}, {r96, r332}, {0x0, r13}, {r273, r362}, {r289}, {r223, r107}, {r373, r113}, {r306, r219}, {r285, r299}, {r325}, {r342, r83}, {r22, r210}, {r52, r47}, {r232, r123}, {r190}, {r275, r170}, {r225, r208}, {r326, r1}, {r346}, {r18, r28}, {r377, r319}, {r229, r165}, {0x0, r85}, {r37, r1}, {r377, r79}, {0x0, r210}, {r18, r296}, {r175}, {r108, r199}, {r121, r35}, {r143, r159}, {r217, r292}, {r121, r247}, {r82, r177}, {r288, r5}, {r33, r132}, {r271, r274}, {r70, r43}, {r178, r255}, {r316, r165}, {r18}, {r235, r360}, {0x0, r238}, {}, {r4, r199}, {r186, r76}, {r134}, {r36, r199}, {0x0, r140}, {r349, r109}, {r98, r263}, {r158, r281}, {r365}, {r22, r81}, {r12, r277}, {r136, r59}, {r124, r53}, {0x0, r177}, {r4}, {0x0, r255}, {r145, r66}, {r380}, {r207, r255}, {0x0, r278}, {r229, r27}, {r275, r183}, {r311, r257}, {r56, r19}, {r87, r197}, {r235}, {r344, r46}, {r129}, {r182, r270}, {r34, r296}, {r242}, {0x0, r350}, {r158, r297}, {r378, r267}, {0x0, r67}, {r254, r237}, {r279, r43}, {r322, r286}, {r351, r287}, {0x0, r329}, {r304, r234}, {r275, r41}, {r266, r102}, {0x0, r161}, {r363, r222}, {r357, r177}, {r365, r294}, {r172, r244}, {r187, r25}, {0x0, r278}, {r316, r327}, {r65, r167}, {r185, r301}, {r26, r13}, {r29, r202}, {r63, r305}, {r133, r181}, {r335, r151}, {r308, r49}, {r84, r214}, {r33, r352}, {r184, r39}, {r106, r193}, {r190}, {r24, r284}, {r34, r295}, {r186, r197}, {r150, r290}, {r328, r313}, {r236, r68}, {r103, r364}, {r110, r71}, {r217, r44}, {r40, r51}, {r264}, {}, {r355, r55}, {r126, r23}, {r3, r97}, {r314, r135}, {r160}, {r348, r57}, {r266, r203}, {r229, r263}], 0x1f, "e2a8d531110d99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r384 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r384, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r384, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r389}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r387}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r390}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r388}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r389, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r530, r522}, {r518}, {0x0, r454}, {r435, r490}, {}, {r461}, {0x0, r474}, {r400}, {r476}, {}, {}, {}, {r444, r399}, {r535, r534}, {}, {}, {0x0, r545}, {}, {r398}, {0x0, r526}, {r529}, {r458}, {}, {r419}, {r448}, {0x0, r504}, {}, {0x0, r394}, {}, {}, {r512, r531}, {r556}, {}, {r409}, {}, {r544}, {}, {0x0, r414}, {0x0, r486}, {r558, r488}, {r424, r540}, {}, {r392}, {r482}, {}, {}, {0x0, r561}, {0x0, r507}, {}, {}, {r385, r425}, {0x0, r432}, {r386}, {}, {r463, r502}, {r555, r472}, {}, {r523, r507}, {0x0, r405}, {r468, r383}, {}, {r514}, {r478}, {r464}, {}, {}, {}, {}, {}, {0x0, r563}, {}, {0x0, r428}, {}, {}, {r551}, {0x0, r453}, {r465, r453}, {}, {}, {}, {}, {}, {r431, r415}, {}, {}, {0x0, r536}, {r412}, {0x0, r457}, {}, {}, {r538}, {r412}, {}, {r391, r406}, {}, {r430}, {0x0, r438}, {r530, r521}, {r461}, {r424, r549}, {r517, r502}, {r557, r477}, {r508, r528}, {0x0, r467}, {}, {r489}, {0x0, r454}, {0x0, r440}, {r548, r516}, {r416}, {0x0, r543}, {r506}, {r404}, {r546}, {0x0, r494}, {}, {r537, r559}, {0x0, r443}, {r495}, {0x0, r491}, {}, {r492}, {0x0, r445}, {0x0, r487}, {r473}, {}, {0x0, r498}, {r408, r439}, {r452}, {0x0, r417}, {}, {r402}, {}, {r451, r434}, {r512}, {r541}, {r466, r438}, {r427}, {0x0, r503}, {r523, r533}, {}, {0x0, r547}, {0x0, r560}, {}, {}, {0x0, r420}, {r553}, {0x0, r527}, {}, {}, {r520, r545}, {}, {0x0, r479}, {0x0, r511}, {0x0, r500}, {r542, r531}, {0x0, r550}, {r539, r498}, {0x0, r554}, {r483, r396}, {0x0, r426}, {}, {0x0, r493}, {r513, r394}, {r484, r397}, {r395, r459}, {0x0, r455}, {0x0, r393}, {r456}, {}, {r551, r383}, {0x0, r501}, {0x0, r415}, {}, {r564, r481}, {}, {0x0, r509}, {0x0, r428}, {}, {}, {}, {}, {r496, r418}, {r446}, {r429}, {0x0, r524}, {}, {r499}, {}, {r441}, {r437}, {r562, r547}, {}, {0x0, r505}, {}, {0x0, r439}, {r458}, {0x0, r415}, {}, {}, {r558, r411}, {0x0, r469}, {0x0, r462}, {0x0, r413}, {0x0, r421}, {}, {r489}, {r447}, {r532}, {}, {0x0, r403}, {0x0, r450}, {0x0, r442}, {r470}, {0x0, r493}, {r506, r475}, {}, {r433}, {}, {}, {}, {r460, r474}, {r557, r462}, {r444, r410}, {r463}, {r510}, {}, {r525, r417}, {}, {}, {}, {}, {0x0, r422}, {r436, r485}, {0x0, r449}, {0x0, r515}, {}, {}, {r407, r552}, {}, {r497}, {}, {}, {r510, r543}, {}, {}, {r480}, {}, {}, {r510, r471}, {}, {0x0, r423}, {0x0, r519}, {r401, r393}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r566 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r566, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r566, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r571}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r569}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r572}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r570}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r571, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r712, r704}, {r700}, {0x0, r636}, {r617, r672}, {}, {r643}, {0x0, r656}, {r582}, {r658}, {}, {}, {}, {r626, r581}, {r717, r716}, {}, {}, {0x0, r727}, {}, {r580}, {0x0, r708}, {r711}, {r640}, {}, {r601}, {r630}, {0x0, r686}, {}, {0x0, r576}, {}, {}, {r694, r713}, {r738}, {}, {r591}, {}, {r726}, {}, {0x0, r596}, {0x0, r668}, {r740, r670}, {r606, r722}, {}, {r574}, {r664}, {}, {}, {0x0, r743}, {0x0, r689}, {}, {}, {r567, r607}, {0x0, r614}, {r568}, {}, {r645, r684}, {r737, r654}, {}, {r705, r689}, {0x0, r587}, {r650, r565}, {}, {r696}, {r660}, {r646}, {}, {}, {}, {}, {}, {0x0, r745}, {}, {0x0, r610}, {}, {}, {r733}, {0x0, r635}, {r647, r635}, {}, {}, {}, {}, {}, {r613, r597}, {}, {}, {0x0, r718}, {r594}, {0x0, r639}, {}, {}, {r720}, {r594}, {}, {r573, r588}, {}, {r612}, {0x0, r620}, {r712, r703}, {r643}, {r606, r731}, {r699, r684}, {r739, r659}, {r690, r710}, {0x0, r649}, {}, {r671}, {0x0, r636}, {0x0, r622}, {r730, r698}, {r598}, {0x0, r725}, {r688}, {r586}, {r728}, {0x0, r676}, {}, {r719, r741}, {0x0, r625}, {r677}, {0x0, r673}, {}, {r674}, {0x0, r627}, {0x0, r669}, {r655}, {}, {0x0, r680}, {r590, r621}, {r634}, {0x0, r599}, {}, {r584}, {}, {r633, r616}, {r694}, {r723}, {r648, r620}, {r609}, {0x0, r685}, {r705, r715}, {}, {0x0, r729}, {0x0, r742}, {}, {}, {0x0, r602}, {r735}, {0x0, r709}, {}, {}, {r702, r727}, {}, {0x0, r661}, {0x0, r693}, {0x0, r682}, {r724, r713}, {0x0, r732}, {r721, r680}, {0x0, r736}, {r665, r578}, {0x0, r608}, {}, {0x0, r675}, {r695, r576}, {r666, r579}, {r577, r641}, {0x0, r637}, {0x0, r575}, {r638}, {}, {r733, r565}, {0x0, r683}, {0x0, r597}, {}, {r746, r663}, {}, {0x0, r691}, {0x0, r610}, {}, {}, {}, {}, {r678, r600}, {r628}, {r611}, {0x0, r706}, {}, {r681}, {}, {r623}, {r619}, {r744, r729}, {}, {0x0, r687}, {}, {0x0, r621}, {r640}, {0x0, r597}, {}, {}, {r740, r593}, {0x0, r651}, {0x0, r644}, {0x0, r595}, {0x0, r603}, {}, {r671}, {r629}, {r714}, {}, {0x0, r585}, {0x0, r632}, {0x0, r624}, {r652}, {0x0, r675}, {r688, r657}, {}, {r615}, {}, {}, {}, {r642, r656}, {r739, r644}, {r626, r592}, {r645}, {r692}, {}, {r707, r599}, {}, {}, {}, {}, {0x0, r604}, {r618, r667}, {0x0, r631}, {0x0, r697}, {}, {}, {r589, r734}, {}, {r679}, {}, {}, {r692, r725}, {}, {}, {r662}, {}, {}, {r692, r653}, {}, {0x0, r605}, {0x0, r701}, {r583, r575}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r302, r286}, {r276}, {0x0, r149}, {r114, r218}, {}, {r166}, {0x0, r192}, {r33}, {r194}, {}, {}, {}, {r131, r32}, {r320, r309}, {}, {}, {0x0, r343}, {}, {r29}, {0x0, r294}, {r300}, {r158}, {}, {r385}, {r141}, {0x0, r243}, {}, {0x0, r16}, {}, {}, {r264, r305}, {r365}, {}, {r58}, {}, {r342}, {}, {0x0, r76}, {0x0, r209}, {r368, r215}, {r91, r332}, {}, {r14}, {r204}, {}, {}, {0x0, r374}, {0x0, r249}, {}, {}, {r3, r93}, {0x0, r109}, {r4}, {}, {r169, r239}, {r361, r188}, {}, {r288, r249}, {0x0, r47}, {r175, r1}, {}, {r268}, {r198}, {r171}, {}, {}, {}, {}, {}, {0x0, r379}, {}, {0x0, r100}, {}, {}, {r355}, {0x0, r147}, {r172, r147}, {}, {}, {}, {}, {}, {r108, r79}, {}, {}, {0x0, r323}, {r73}, {0x0, r153}, {}, {}, {r326}, {r73}, {}, {r12, r49}, {}, {r105}, {0x0, r120}, {r302, r284}, {r166}, {r91, r352}, {r273, r239}, {r366, r195}, {r250, r297}, {0x0, r174}, {}, {r216}, {0x0, r149}, {0x0, r123}, {r348, r272}, {r80}, {0x0, r341}, {r248}, {r45}, {r344}, {0x0, r222}, {}, {r324, r369}, {0x0, r130}, {r223}, {0x0, r219}, {}, {r220}, {0x0, r132}, {0x0, r212}, {r191}, {}, {0x0, r231}, {r56, r122}, {r146}, {0x0, r81}, {}, {r36}, {}, {r145, r112}, {r264}, {r333}, {r173, r120}, {r99}, {0x0, r95}, {r288, r307}, {}, {0x0, r347}, {0x0, r370}, {}, {}, {0x0, r86}, {r357}, {0x0, r296}, {}, {r50}, {r283, r343}, {}, {0x0, r199}, {0x0, r259}, {0x0, r237}, {r340, r305}, {0x0, r354}, {r330, r231}, {0x0, r358}, {r205, r19}, {0x0, r95}, {}, {0x0, r221}, {r266, r16}, {r207, r382}, {r18, r161}, {0x0, r151}, {0x0, r15}, {r152}, {}, {r355, r1}, {0x0, r238}, {0x0, r79}, {}, {r380, r201}, {}, {0x0, r251}, {0x0, r100}, {}, {}, {}, {}, {r228, r83}, {r133}, {r101}, {r568, r290}, {}, {r235}, {}, {r124}, {r119}, {r378, r347}, {}, {0x0, r247}, {}, {0x0, r122}, {r158}, {0x0, r79}, {}, {}, {r368, r66}, {0x0, r176}, {0x0, r167}, {0x0, r74}, {0x0, r88}, {}, {r216}, {r134}, {r306}, {}, {0x0, r43}, {0x0, r144}, {0x0, r125}, {r178}, {0x0, r221}, {r248, r193}, {}, {r111}, {}, {}, {}, {r162, r192}, {r366, r167}, {r131, r64}, {r169}, {r258}, {}, {r291, r81}, {}, {}, {}, {}, {0x0, r89}, {r117, r208}, {0x0, r142}, {0x0, r269}, {}, {}, {r54, r356}, {}, {r230}, {}, {}, {r258, r341}, {}, {}, {r200}, {}, {}, {r258, r181}, {}, {0x0, r90}, {0x0, r277}, {r34, r15}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r3, 0x6d4a24c8}) 22:45:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000e053900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000063900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:40 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x959e}}}}}}}]}}, 0x0) 22:45:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/tty/drivers\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x258, 0x0, 0x0, 0x2000000000000000) 22:45:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x4, 0x86, 0x98, 0x2, 0x3, 0x9, 0xe1, 0x40, 0xe7, 0x1, 0xbfea, 0x38, 0x1, 0x5eb, 0x100, 0x8a5}, [{0x5, 0x6, 0x1, 0xffffffffffffff6f, 0x80000001, 0x8, 0x8000000000000000, 0x5}], "5a25efe865cf4cd8ac0cfe4dbd712d30a917b296b1b698f8ce11631d0a92a0026565341347cae714b2ddf7d839807108be83284c562f7eabd4c117eca7024845cb8b9662a87bbf32c18d381a520b8116c096b232b877aabbc032d0e60df6d749a4ccbcbba3afa0fba553cea0db28ff86cf452980d798309ce14206e64cc3bced8aa159d89e1dc4713fb42f35bbb4b14af6f11389cfc2c7a362d5f2ca47f8d411894b5b1844bc65e6d91135357170680842847b61886fdef98b65cc55a2811fe75c9003cf43c8c06893b0fdd49cfd4d5ee8760ecd578502473747d706e91fb0fcca", ['\x00']}, 0x259) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r6, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ac0)={0x401, [{r138, r62}, {0x0, r339}, {r250, r206}, {r42, r11}, {r324, r30}, {r7, r246}, {r145, r189}, {r349, r215}, {r99}, {r185, r17}, {r371, r303}, {r168, r122}, {r40, r267}, {r302, r222}, {r230, r1}, {r148, r296}, {r331, r179}, {r312, r13}, {r280, r286}, {r252, r123}, {0x0, r336}, {r225, r319}, {r4, r369}, {r260, r170}, {r31}, {r308, r213}, {r48, r17}, {r204, r296}, {r137, r79}, {r282, r210}, {r326, r28}, {r136, r120}, {r22}, {r256, r68}, {r172}, {0x0, r376}, {r223, r60}, {r361, r251}, {0x0, r347}, {r154, r222}, {r288, r8}, {r335, r341}, {r357, r206}, {r143, r255}, {r20}, {r26, r372}, {r338, r112}, {0x0, r17}, {r304, r189}, {r236, r298}, {r211, r231}, {r185, r332}, {r115, r367}, {r240, r299}, {r58, r317}, {r69, r294}, {r266, r261}, {r180, r81}, {r173, r157}, {r207, r224}, {r169, r337}, {r139, r155}, {r225, r23}, {r128, r334}, {r131}, {r258, r118}, {r156, r372}, {r131, r219}, {0x0, r15}, {r217, r290}, {r154, r38}, {r94, r376}, {0x0, r163}, {r108, r233}, {0x0, r301}, {0x0, r97}, {0x0, r360}, {r371, r286}, {r75, r213}, {r282, r27}, {0x0, r68}, {0x0, r116}, {r26, r345}, {r205, r85}, {r42, r321}, {0x0, r13}, {r349}, {r271, r53}, {r310, r369}, {r293, r27}, {r245, r132}, {r375, r265}, {r4, r215}, {r227, r231}, {r124, r90}, {r14, r144}, {r353, r104}, {r160, r272}, {r338, r356}, {r346, r118}, {r235}, {0x0, r38}, {r363, r116}, {r282}, {0x0, r277}, {r148, r86}, {r359, r127}, {r273, r352}, {0x0, r88}, {r164, r241}, {r40, r253}, {r211, r347}, {r141, r381}, {r72, r183}, {r254, r130}, {r77, r323}, {r9, r231}, {r29, r151}, {r196, r116}, {r318, r92}, {0x0, r315}, {r242}, {r314, r226}, {r78, r21}, {r240}, {r262, r113}, {r172, r25}, {r61, r97}, {r96, r332}, {0x0, r13}, {r273, r362}, {r289}, {r223, r107}, {r373, r113}, {r306, r219}, {r285, r299}, {r325}, {r342, r83}, {r22, r210}, {r52, r47}, {r232, r123}, {r190}, {r275, r170}, {r225, r208}, {r326, r1}, {r346}, {r18, r28}, {r377, r319}, {r229, r165}, {0x0, r85}, {r37, r1}, {r377, r79}, {0x0, r210}, {r18, r296}, {r175}, {r108, r199}, {r121, r35}, {r143, r159}, {r217, r292}, {r121, r247}, {r82, r177}, {r288, r5}, {r33, r132}, {r271, r274}, {r70, r43}, {r178, r255}, {r316, r165}, {r18}, {r235, r360}, {0x0, r238}, {}, {r4, r199}, {r186, r76}, {r134}, {r36, r199}, {0x0, r140}, {r349, r109}, {r98, r263}, {r158, r281}, {r365}, {r22, r81}, {r12, r277}, {r136, r59}, {r124, r53}, {0x0, r177}, {r4}, {0x0, r255}, {r145, r66}, {r380}, {r207, r255}, {0x0, r278}, {r229, r27}, {r275, r183}, {r311, r257}, {r56, r19}, {r87, r197}, {r235}, {r344, r46}, {r129}, {r182, r270}, {r34, r296}, {r242}, {0x0, r350}, {r158, r297}, {r378, r267}, {0x0, r67}, {r254, r237}, {r279, r43}, {r322, r286}, {r351, r287}, {0x0, r329}, {r304, r234}, {r275, r41}, {r266, r102}, {0x0, r161}, {r363, r222}, {r357, r177}, {r365, r294}, {r172, r244}, {r187, r25}, {0x0, r278}, {r316, r327}, {r65, r167}, {r185, r301}, {r26, r13}, {r29, r202}, {r63, r305}, {r133, r181}, {r335, r151}, {r308, r49}, {r84, r214}, {r33, r352}, {r184, r39}, {r106, r193}, {r190}, {r24, r284}, {r34, r295}, {r186, r197}, {r150, r290}, {r328, r313}, {r236, r68}, {r103, r364}, {r110, r71}, {r217, r44}, {r40, r51}, {r264}, {}, {r355, r55}, {r126, r23}, {r3, r97}, {r314, r135}, {r160}, {r348, r57}, {r266, r203}, {r229, r263}], 0x1f, "e2a8d531110d99"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r384 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r384, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r384, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r389}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r387}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r390}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r388}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r389, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r530, r522}, {r518}, {0x0, r454}, {r435, r490}, {}, {r461}, {0x0, r474}, {r400}, {r476}, {}, {}, {}, {r444, r399}, {r535, r534}, {}, {}, {0x0, r545}, {}, {r398}, {0x0, r526}, {r529}, {r458}, {}, {r419}, {r448}, {0x0, r504}, {}, {0x0, r394}, {}, {}, {r512, r531}, {r556}, {}, {r409}, {}, {r544}, {}, {0x0, r414}, {0x0, r486}, {r558, r488}, {r424, r540}, {}, {r392}, {r482}, {}, {}, {0x0, r561}, {0x0, r507}, {}, {}, {r385, r425}, {0x0, r432}, {r386}, {}, {r463, r502}, {r555, r472}, {}, {r523, r507}, {0x0, r405}, {r468, r383}, {}, {r514}, {r478}, {r464}, {}, {}, {}, {}, {}, {0x0, r563}, {}, {0x0, r428}, {}, {}, {r551}, {0x0, r453}, {r465, r453}, {}, {}, {}, {}, {}, {r431, r415}, {}, {}, {0x0, r536}, {r412}, {0x0, r457}, {}, {}, {r538}, {r412}, {}, {r391, r406}, {}, {r430}, {0x0, r438}, {r530, r521}, {r461}, {r424, r549}, {r517, r502}, {r557, r477}, {r508, r528}, {0x0, r467}, {}, {r489}, {0x0, r454}, {0x0, r440}, {r548, r516}, {r416}, {0x0, r543}, {r506}, {r404}, {r546}, {0x0, r494}, {}, {r537, r559}, {0x0, r443}, {r495}, {0x0, r491}, {}, {r492}, {0x0, r445}, {0x0, r487}, {r473}, {}, {0x0, r498}, {r408, r439}, {r452}, {0x0, r417}, {}, {r402}, {}, {r451, r434}, {r512}, {r541}, {r466, r438}, {r427}, {0x0, r503}, {r523, r533}, {}, {0x0, r547}, {0x0, r560}, {}, {}, {0x0, r420}, {r553}, {0x0, r527}, {}, {}, {r520, r545}, {}, {0x0, r479}, {0x0, r511}, {0x0, r500}, {r542, r531}, {0x0, r550}, {r539, r498}, {0x0, r554}, {r483, r396}, {0x0, r426}, {}, {0x0, r493}, {r513, r394}, {r484, r397}, {r395, r459}, {0x0, r455}, {0x0, r393}, {r456}, {}, {r551, r383}, {0x0, r501}, {0x0, r415}, {}, {r564, r481}, {}, {0x0, r509}, {0x0, r428}, {}, {}, {}, {}, {r496, r418}, {r446}, {r429}, {0x0, r524}, {}, {r499}, {}, {r441}, {r437}, {r562, r547}, {}, {0x0, r505}, {}, {0x0, r439}, {r458}, {0x0, r415}, {}, {}, {r558, r411}, {0x0, r469}, {0x0, r462}, {0x0, r413}, {0x0, r421}, {}, {r489}, {r447}, {r532}, {}, {0x0, r403}, {0x0, r450}, {0x0, r442}, {r470}, {0x0, r493}, {r506, r475}, {}, {r433}, {}, {}, {}, {r460, r474}, {r557, r462}, {r444, r410}, {r463}, {r510}, {}, {r525, r417}, {}, {}, {}, {}, {0x0, r422}, {r436, r485}, {0x0, r449}, {0x0, r515}, {}, {}, {r407, r552}, {}, {r497}, {}, {}, {r510, r543}, {}, {}, {r480}, {}, {}, {r510, r471}, {}, {0x0, r423}, {0x0, r519}, {r401, r393}], 0x43, "bccf4bb0345f69"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) r566 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r566, 0xc0105512, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r566, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r571}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r569}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r572}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r570}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r571, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r712, r704}, {r700}, {0x0, r636}, {r617, r672}, {}, {r643}, {0x0, r656}, {r582}, {r658}, {}, {}, {}, {r626, r581}, {r717, r716}, {}, {}, {0x0, r727}, {}, {r580}, {0x0, r708}, {r711}, {r640}, {}, {r601}, {r630}, {0x0, r686}, {}, {0x0, r576}, {}, {}, {r694, r713}, {r738}, {}, {r591}, {}, {r726}, {}, {0x0, r596}, {0x0, r668}, {r740, r670}, {r606, r722}, {}, {r574}, {r664}, {}, {}, {0x0, r743}, {0x0, r689}, {}, {}, {r567, r607}, {0x0, r614}, {r568}, {}, {r645, r684}, {r737, r654}, {}, {r705, r689}, {0x0, r587}, {r650, r565}, {}, {r696}, {r660}, {r646}, {}, {}, {}, {}, {}, {0x0, r745}, {}, {0x0, r610}, {}, {}, {r733}, {0x0, r635}, {r647, r635}, {}, {}, {}, {}, {}, {r613, r597}, {}, {}, {0x0, r718}, {r594}, {0x0, r639}, {}, {}, {r720}, {r594}, {}, {r573, r588}, {}, {r612}, {0x0, r620}, {r712, r703}, {r643}, {r606, r731}, {r699, r684}, {r739, r659}, {r690, r710}, {0x0, r649}, {}, {r671}, {0x0, r636}, {0x0, r622}, {r730, r698}, {r598}, {0x0, r725}, {r688}, {r586}, {r728}, {0x0, r676}, {}, {r719, r741}, {0x0, r625}, {r677}, {0x0, r673}, {}, {r674}, {0x0, r627}, {0x0, r669}, {r655}, {}, {0x0, r680}, {r590, r621}, {r634}, {0x0, r599}, {}, {r584}, {}, {r633, r616}, {r694}, {r723}, {r648, r620}, {r609}, {0x0, r685}, {r705, r715}, {}, {0x0, r729}, {0x0, r742}, {}, {}, {0x0, r602}, {r735}, {0x0, r709}, {}, {}, {r702, r727}, {}, {0x0, r661}, {0x0, r693}, {0x0, r682}, {r724, r713}, {0x0, r732}, {r721, r680}, {0x0, r736}, {r665, r578}, {0x0, r608}, {}, {0x0, r675}, {r695, r576}, {r666, r579}, {r577, r641}, {0x0, r637}, {0x0, r575}, {r638}, {}, {r733, r565}, {0x0, r683}, {0x0, r597}, {}, {r746, r663}, {}, {0x0, r691}, {0x0, r610}, {}, {}, {}, {}, {r678, r600}, {r628}, {r611}, {0x0, r706}, {}, {r681}, {}, {r623}, {r619}, {r744, r729}, {}, {0x0, r687}, {}, {0x0, r621}, {r640}, {0x0, r597}, {}, {}, {r740, r593}, {0x0, r651}, {0x0, r644}, {0x0, r595}, {0x0, r603}, {}, {r671}, {r629}, {r714}, {}, {0x0, r585}, {0x0, r632}, {0x0, r624}, {r652}, {0x0, r675}, {r688, r657}, {}, {r615}, {}, {}, {}, {r642, r656}, {r739, r644}, {r626, r592}, {r645}, {r692}, {}, {r707, r599}, {}, {}, {}, {}, {0x0, r604}, {r618, r667}, {0x0, r631}, {0x0, r697}, {}, {}, {r589, r734}, {}, {r679}, {}, {}, {r692, r725}, {}, {}, {r662}, {}, {}, {r692, r653}, {}, {0x0, r605}, {0x0, r701}, {r583, r575}], 0x43, "bccf4bb0345f69"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r302, r286}, {r276}, {0x0, r149}, {r114, r218}, {}, {r166}, {0x0, r192}, {r33}, {r194}, {}, {}, {}, {r131, r32}, {r320, r309}, {}, {}, {0x0, r343}, {}, {r29}, {0x0, r294}, {r300}, {r158}, {}, {r385}, {r141}, {0x0, r243}, {}, {0x0, r16}, {}, {}, {r264, r305}, {r365}, {}, {r58}, {}, {r342}, {}, {0x0, r76}, {0x0, r209}, {r368, r215}, {r91, r332}, {}, {r14}, {r204}, {}, {}, {0x0, r374}, {0x0, r249}, {}, {}, {r3, r93}, {0x0, r109}, {r4}, {}, {r169, r239}, {r361, r188}, {}, {r288, r249}, {0x0, r47}, {r175, r1}, {}, {r268}, {r198}, {r171}, {}, {}, {}, {}, {}, {0x0, r379}, {}, {0x0, r100}, {}, {}, {r355}, {0x0, r147}, {r172, r147}, {}, {}, {}, {}, {}, {r108, r79}, {}, {}, {0x0, r323}, {r73}, {0x0, r153}, {}, {}, {r326}, {r73}, {}, {r12, r49}, {}, {r105}, {0x0, r120}, {r302, r284}, {r166}, {r91, r352}, {r273, r239}, {r366, r195}, {r250, r297}, {0x0, r174}, {}, {r216}, {0x0, r149}, {0x0, r123}, {r348, r272}, {r80}, {0x0, r341}, {r248}, {r45}, {r344}, {0x0, r222}, {}, {r324, r369}, {0x0, r130}, {r223}, {0x0, r219}, {}, {r220}, {0x0, r132}, {0x0, r212}, {r191}, {}, {0x0, r231}, {r56, r122}, {r146}, {0x0, r81}, {}, {r36}, {}, {r145, r112}, {r264}, {r333}, {r173, r120}, {r99}, {0x0, r95}, {r288, r307}, {}, {0x0, r347}, {0x0, r370}, {}, {}, {0x0, r86}, {r357}, {0x0, r296}, {}, {r50}, {r283, r343}, {}, {0x0, r199}, {0x0, r259}, {0x0, r237}, {r340, r305}, {0x0, r354}, {r330, r231}, {0x0, r358}, {r205, r19}, {0x0, r95}, {}, {0x0, r221}, {r266, r16}, {r207, r382}, {r18, r161}, {0x0, r151}, {0x0, r15}, {r152}, {}, {r355, r1}, {0x0, r238}, {0x0, r79}, {}, {r380, r201}, {}, {0x0, r251}, {0x0, r100}, {}, {}, {}, {}, {r228, r83}, {r133}, {r101}, {r568, r290}, {}, {r235}, {}, {r124}, {r119}, {r378, r347}, {}, {0x0, r247}, {}, {0x0, r122}, {r158}, {0x0, r79}, {}, {}, {r368, r66}, {0x0, r176}, {0x0, r167}, {0x0, r74}, {0x0, r88}, {}, {r216}, {r134}, {r306}, {}, {0x0, r43}, {0x0, r144}, {0x0, r125}, {r178}, {0x0, r221}, {r248, r193}, {}, {r111}, {}, {}, {}, {r162, r192}, {r366, r167}, {r131, r64}, {r169}, {r258}, {}, {r291, r81}, {}, {}, {}, {}, {0x0, r89}, {r117, r208}, {0x0, r142}, {0x0, r269}, {}, {}, {r54, r356}, {}, {r230}, {}, {}, {r258, r341}, {}, {}, {r200}, {}, {}, {r258, r181}, {}, {0x0, r90}, {0x0, r277}, {r34, r15}], 0x43, "bccf4bb0345f69"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r3, 0x6d4a24c8}) 22:45:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:41 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000073900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1218.720582][ T5045] Bluetooth: hci2: legacy adv larger than 31 bytes [ 1221.644933][T17335] usb 4-1: new high-speed USB device number 21 using dummy_hcd 22:45:42 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) [ 1221.892580][T17335] usb 4-1: Using ep0 maxpacket: 32 22:45:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x4, 0x86, 0x98, 0x2, 0x3, 0x9, 0xe1, 0x40, 0xe7, 0x1, 0xbfea, 0x38, 0x1, 0x5eb, 0x100, 0x8a5}, [{0x5, 0x6, 0x1, 0xffffffffffffff6f, 0x80000001, 0x8, 0x8000000000000000, 0x5}], "5a25efe865cf4cd8ac0cfe4dbd712d30a917b296b1b698f8ce11631d0a92a0026565341347cae714b2ddf7d839807108be83284c562f7eabd4c117eca7024845cb8b9662a87bbf32c18d381a520b8116c096b232b877aabbc032d0e60df6d749a4ccbcbba3afa0fba553cea0db28ff86cf452980d798309ce14206e64cc3bced8aa159d89e1dc4713fb42f35bbb4b14af6f11389cfc2c7a362d5f2ca47f8d411894b5b1844bc65e6d91135357170680842847b61886fdef98b65cc55a2811fe75c9003cf43c8c06893b0fdd49cfd4d5ee8760ecd578502473747d706e91fb0fcca", ['\x00']}, 0x259) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r6, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ac0)={0x401, [{r138, r62}, {0x0, r339}, {r250, r206}, {r42, r11}, {r324, r30}, {r7, r246}, {r145, r189}, {r349, r215}, {r99}, {r185, r17}, {r371, r303}, {r168, r122}, {r40, r267}, {r302, r222}, {r230, r1}, {r148, r296}, {r331, r179}, {r312, r13}, {r280, r286}, {r252, r123}, {0x0, r336}, {r225, r319}, {r4, r369}, {r260, r170}, {r31}, {r308, r213}, {r48, r17}, {r204, r296}, {r137, r79}, {r282, r210}, {r326, r28}, {r136, r120}, {r22}, {r256, r68}, {r172}, {0x0, r376}, {r223, r60}, {r361, r251}, {0x0, r347}, {r154, r222}, {r288, r8}, {r335, r341}, {r357, r206}, {r143, r255}, {r20}, {r26, r372}, {r338, r112}, {0x0, r17}, {r304, r189}, {r236, r298}, {r211, r231}, {r185, r332}, {r115, r367}, {r240, r299}, {r58, r317}, {r69, r294}, {r266, r261}, {r180, r81}, {r173, r157}, {r207, r224}, {r169, r337}, {r139, r155}, {r225, r23}, {r128, r334}, {r131}, {r258, r118}, {r156, r372}, {r131, r219}, {0x0, r15}, {r217, r290}, {r154, r38}, {r94, r376}, {0x0, r163}, {r108, r233}, {0x0, r301}, {0x0, r97}, {0x0, r360}, {r371, r286}, {r75, r213}, {r282, r27}, {0x0, r68}, {0x0, r116}, {r26, r345}, {r205, r85}, {r42, r321}, {0x0, r13}, {r349}, {r271, r53}, {r310, r369}, {r293, r27}, {r245, r132}, {r375, r265}, {r4, r215}, {r227, r231}, {r124, r90}, {r14, r144}, {r353, r104}, {r160, r272}, {r338, r356}, {r346, r118}, {r235}, {0x0, r38}, {r363, r116}, {r282}, {0x0, r277}, {r148, r86}, {r359, r127}, {r273, r352}, {0x0, r88}, {r164, r241}, {r40, r253}, {r211, r347}, {r141, r381}, {r72, r183}, {r254, r130}, {r77, r323}, {r9, r231}, {r29, r151}, {r196, r116}, {r318, r92}, {0x0, r315}, {r242}, {r314, r226}, {r78, r21}, {r240}, {r262, r113}, {r172, r25}, {r61, r97}, {r96, r332}, {0x0, r13}, {r273, r362}, {r289}, {r223, r107}, {r373, r113}, {r306, r219}, {r285, r299}, {r325}, {r342, r83}, {r22, r210}, {r52, r47}, {r232, r123}, {r190}, {r275, r170}, {r225, r208}, {r326, r1}, {r346}, {r18, r28}, {r377, r319}, {r229, r165}, {0x0, r85}, {r37, r1}, {r377, r79}, {0x0, r210}, {r18, r296}, {r175}, {r108, r199}, {r121, r35}, {r143, r159}, {r217, r292}, {r121, r247}, {r82, r177}, {r288, r5}, {r33, r132}, {r271, r274}, {r70, r43}, {r178, r255}, {r316, r165}, {r18}, {r235, r360}, {0x0, r238}, {}, {r4, r199}, {r186, r76}, {r134}, {r36, r199}, {0x0, r140}, {r349, r109}, {r98, r263}, {r158, r281}, {r365}, {r22, r81}, {r12, r277}, {r136, r59}, {r124, r53}, {0x0, r177}, {r4}, {0x0, r255}, {r145, r66}, {r380}, {r207, r255}, {0x0, r278}, {r229, r27}, {r275, r183}, {r311, r257}, {r56, r19}, {r87, r197}, {r235}, {r344, r46}, {r129}, {r182, r270}, {r34, r296}, {r242}, {0x0, r350}, {r158, r297}, {r378, r267}, {0x0, r67}, {r254, r237}, {r279, r43}, {r322, r286}, {r351, r287}, {0x0, r329}, {r304, r234}, {r275, r41}, {r266, r102}, {0x0, r161}, {r363, r222}, {r357, r177}, {r365, r294}, {r172, r244}, {r187, r25}, {0x0, r278}, {r316, r327}, {r65, r167}, {r185, r301}, {r26, r13}, {r29, r202}, {r63, r305}, {r133, r181}, {r335, r151}, {r308, r49}, {r84, r214}, {r33, r352}, {r184, r39}, {r106, r193}, {r190}, {r24, r284}, {r34, r295}, {r186, r197}, {r150, r290}, {r328, r313}, {r236, r68}, {r103, r364}, {r110, r71}, {r217, r44}, {r40, r51}, {r264}, {}, {r355, r55}, {r126, r23}, {r3, r97}, {r314, r135}, {r160}, {r348, r57}, {r266, r203}, {r229, r263}], 0x1f, "e2a8d531110d99"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) r384 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r384, 0xc0105512, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r384, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r389}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r387}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r390}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r388}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r389, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r530, r522}, {r518}, {0x0, r454}, {r435, r490}, {}, {r461}, {0x0, r474}, {r400}, {r476}, {}, {}, {}, {r444, r399}, {r535, r534}, {}, {}, {0x0, r545}, {}, {r398}, {0x0, r526}, {r529}, {r458}, {}, {r419}, {r448}, {0x0, r504}, {}, {0x0, r394}, {}, {}, {r512, r531}, {r556}, {}, {r409}, {}, {r544}, {}, {0x0, r414}, {0x0, r486}, {r558, r488}, {r424, r540}, {}, {r392}, {r482}, {}, {}, {0x0, r561}, {0x0, r507}, {}, {}, {r385, r425}, {0x0, r432}, {r386}, {}, {r463, r502}, {r555, r472}, {}, {r523, r507}, {0x0, r405}, {r468, r383}, {}, {r514}, {r478}, {r464}, {}, {}, {}, {}, {}, {0x0, r563}, {}, {0x0, r428}, {}, {}, {r551}, {0x0, r453}, {r465, r453}, {}, {}, {}, {}, {}, {r431, r415}, {}, {}, {0x0, r536}, {r412}, {0x0, r457}, {}, {}, {r538}, {r412}, {}, {r391, r406}, {}, {r430}, {0x0, r438}, {r530, r521}, {r461}, {r424, r549}, {r517, r502}, {r557, r477}, {r508, r528}, {0x0, r467}, {}, {r489}, {0x0, r454}, {0x0, r440}, {r548, r516}, {r416}, {0x0, r543}, {r506}, {r404}, {r546}, {0x0, r494}, {}, {r537, r559}, {0x0, r443}, {r495}, {0x0, r491}, {}, {r492}, {0x0, r445}, {0x0, r487}, {r473}, {}, {0x0, r498}, {r408, r439}, {r452}, {0x0, r417}, {}, {r402}, {}, {r451, r434}, {r512}, {r541}, {r466, r438}, {r427}, {0x0, r503}, {r523, r533}, {}, {0x0, r547}, {0x0, r560}, {}, {}, {0x0, r420}, {r553}, {0x0, r527}, {}, {}, {r520, r545}, {}, {0x0, r479}, {0x0, r511}, {0x0, r500}, {r542, r531}, {0x0, r550}, {r539, r498}, {0x0, r554}, {r483, r396}, {0x0, r426}, {}, {0x0, r493}, {r513, r394}, {r484, r397}, {r395, r459}, {0x0, r455}, {0x0, r393}, {r456}, {}, {r551, r383}, {0x0, r501}, {0x0, r415}, {}, {r564, r481}, {}, {0x0, r509}, {0x0, r428}, {}, {}, {}, {}, {r496, r418}, {r446}, {r429}, {0x0, r524}, {}, {r499}, {}, {r441}, {r437}, {r562, r547}, {}, {0x0, r505}, {}, {0x0, r439}, {r458}, {0x0, r415}, {}, {}, {r558, r411}, {0x0, r469}, {0x0, r462}, {0x0, r413}, {0x0, r421}, {}, {r489}, {r447}, {r532}, {}, {0x0, r403}, {0x0, r450}, {0x0, r442}, {r470}, {0x0, r493}, {r506, r475}, {}, {r433}, {}, {}, {}, {r460, r474}, {r557, r462}, {r444, r410}, {r463}, {r510}, {}, {r525, r417}, {}, {}, {}, {}, {0x0, r422}, {r436, r485}, {0x0, r449}, {0x0, r515}, {}, {}, {r407, r552}, {}, {r497}, {}, {}, {r510, r543}, {}, {}, {r480}, {}, {}, {r510, r471}, {}, {0x0, r423}, {0x0, r519}, {r401, r393}], 0x43, "bccf4bb0345f69"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (rerun: 32) r566 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r566, 0xc0105512, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r566, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r571}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r569}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r572}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r570}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r571, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r712, r704}, {r700}, {0x0, r636}, {r617, r672}, {}, {r643}, {0x0, r656}, {r582}, {r658}, {}, {}, {}, {r626, r581}, {r717, r716}, {}, {}, {0x0, r727}, {}, {r580}, {0x0, r708}, {r711}, {r640}, {}, {r601}, {r630}, {0x0, r686}, {}, {0x0, r576}, {}, {}, {r694, r713}, {r738}, {}, {r591}, {}, {r726}, {}, {0x0, r596}, {0x0, r668}, {r740, r670}, {r606, r722}, {}, {r574}, {r664}, {}, {}, {0x0, r743}, {0x0, r689}, {}, {}, {r567, r607}, {0x0, r614}, {r568}, {}, {r645, r684}, {r737, r654}, {}, {r705, r689}, {0x0, r587}, {r650, r565}, {}, {r696}, {r660}, {r646}, {}, {}, {}, {}, {}, {0x0, r745}, {}, {0x0, r610}, {}, {}, {r733}, {0x0, r635}, {r647, r635}, {}, {}, {}, {}, {}, {r613, r597}, {}, {}, {0x0, r718}, {r594}, {0x0, r639}, {}, {}, {r720}, {r594}, {}, {r573, r588}, {}, {r612}, {0x0, r620}, {r712, r703}, {r643}, {r606, r731}, {r699, r684}, {r739, r659}, {r690, r710}, {0x0, r649}, {}, {r671}, {0x0, r636}, {0x0, r622}, {r730, r698}, {r598}, {0x0, r725}, {r688}, {r586}, {r728}, {0x0, r676}, {}, {r719, r741}, {0x0, r625}, {r677}, {0x0, r673}, {}, {r674}, {0x0, r627}, {0x0, r669}, {r655}, {}, {0x0, r680}, {r590, r621}, {r634}, {0x0, r599}, {}, {r584}, {}, {r633, r616}, {r694}, {r723}, {r648, r620}, {r609}, {0x0, r685}, {r705, r715}, {}, {0x0, r729}, {0x0, r742}, {}, {}, {0x0, r602}, {r735}, {0x0, r709}, {}, {}, {r702, r727}, {}, {0x0, r661}, {0x0, r693}, {0x0, r682}, {r724, r713}, {0x0, r732}, {r721, r680}, {0x0, r736}, {r665, r578}, {0x0, r608}, {}, {0x0, r675}, {r695, r576}, {r666, r579}, {r577, r641}, {0x0, r637}, {0x0, r575}, {r638}, {}, {r733, r565}, {0x0, r683}, {0x0, r597}, {}, {r746, r663}, {}, {0x0, r691}, {0x0, r610}, {}, {}, {}, {}, {r678, r600}, {r628}, {r611}, {0x0, r706}, {}, {r681}, {}, {r623}, {r619}, {r744, r729}, {}, {0x0, r687}, {}, {0x0, r621}, {r640}, {0x0, r597}, {}, {}, {r740, r593}, {0x0, r651}, {0x0, r644}, {0x0, r595}, {0x0, r603}, {}, {r671}, {r629}, {r714}, {}, {0x0, r585}, {0x0, r632}, {0x0, r624}, {r652}, {0x0, r675}, {r688, r657}, {}, {r615}, {}, {}, {}, {r642, r656}, {r739, r644}, {r626, r592}, {r645}, {r692}, {}, {r707, r599}, {}, {}, {}, {}, {0x0, r604}, {r618, r667}, {0x0, r631}, {0x0, r697}, {}, {}, {r589, r734}, {}, {r679}, {}, {}, {r692, r725}, {}, {}, {r662}, {}, {}, {r692, r653}, {}, {0x0, r605}, {0x0, r701}, {r583, r575}], 0x43, "bccf4bb0345f69"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r302, r286}, {r276}, {0x0, r149}, {r114, r218}, {}, {r166}, {0x0, r192}, {r33}, {r194}, {}, {}, {}, {r131, r32}, {r320, r309}, {}, {}, {0x0, r343}, {}, {r29}, {0x0, r294}, {r300}, {r158}, {}, {r385}, {r141}, {0x0, r243}, {}, {0x0, r16}, {}, {}, {r264, r305}, {r365}, {}, {r58}, {}, {r342}, {}, {0x0, r76}, {0x0, r209}, {r368, r215}, {r91, r332}, {}, {r14}, {r204}, {}, {}, {0x0, r374}, {0x0, r249}, {}, {}, {r3, r93}, {0x0, r109}, {r4}, {}, {r169, r239}, {r361, r188}, {}, {r288, r249}, {0x0, r47}, {r175, r1}, {}, {r268}, {r198}, {r171}, {}, {}, {}, {}, {}, {0x0, r379}, {}, {0x0, r100}, {}, {}, {r355}, {0x0, r147}, {r172, r147}, {}, {}, {}, {}, {}, {r108, r79}, {}, {}, {0x0, r323}, {r73}, {0x0, r153}, {}, {}, {r326}, {r73}, {}, {r12, r49}, {}, {r105}, {0x0, r120}, {r302, r284}, {r166}, {r91, r352}, {r273, r239}, {r366, r195}, {r250, r297}, {0x0, r174}, {}, {r216}, {0x0, r149}, {0x0, r123}, {r348, r272}, {r80}, {0x0, r341}, {r248}, {r45}, {r344}, {0x0, r222}, {}, {r324, r369}, {0x0, r130}, {r223}, {0x0, r219}, {}, {r220}, {0x0, r132}, {0x0, r212}, {r191}, {}, {0x0, r231}, {r56, r122}, {r146}, {0x0, r81}, {}, {r36}, {}, {r145, r112}, {r264}, {r333}, {r173, r120}, {r99}, {0x0, r95}, {r288, r307}, {}, {0x0, r347}, {0x0, r370}, {}, {}, {0x0, r86}, {r357}, {0x0, r296}, {}, {r50}, {r283, r343}, {}, {0x0, r199}, {0x0, r259}, {0x0, r237}, {r340, r305}, {0x0, r354}, {r330, r231}, {0x0, r358}, {r205, r19}, {0x0, r95}, {}, {0x0, r221}, {r266, r16}, {r207, r382}, {r18, r161}, {0x0, r151}, {0x0, r15}, {r152}, {}, {r355, r1}, {0x0, r238}, {0x0, r79}, {}, {r380, r201}, {}, {0x0, r251}, {0x0, r100}, {}, {}, {}, {}, {r228, r83}, {r133}, {r101}, {r568, r290}, {}, {r235}, {}, {r124}, {r119}, {r378, r347}, {}, {0x0, r247}, {}, {0x0, r122}, {r158}, {0x0, r79}, {}, {}, {r368, r66}, {0x0, r176}, {0x0, r167}, {0x0, r74}, {0x0, r88}, {}, {r216}, {r134}, {r306}, {}, {0x0, r43}, {0x0, r144}, {0x0, r125}, {r178}, {0x0, r221}, {r248, r193}, {}, {r111}, {}, {}, {}, {r162, r192}, {r366, r167}, {r131, r64}, {r169}, {r258}, {}, {r291, r81}, {}, {}, {}, {}, {0x0, r89}, {r117, r208}, {0x0, r142}, {0x0, r269}, {}, {}, {r54, r356}, {}, {r230}, {}, {}, {r258, r341}, {}, {}, {r200}, {}, {}, {r258, r181}, {}, {0x0, r90}, {0x0, r277}, {r34, r15}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r3, 0x6d4a24c8}) 22:45:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000093900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1222.012359][T17335] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1222.021524][T17335] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1222.032381][T17335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 22:45:42 executing program 5: socketpair(0x15, 0x5, 0x2, &(0x7f0000000280)) 22:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:42 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) [ 1222.384006][T17335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.384164][T17335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.384290][T17335] usb 4-1: Product: syz [ 1222.384402][T17335] usb 4-1: Manufacturer: syz [ 1222.384497][T17335] usb 4-1: SerialNumber: syz [ 1222.729112][T17335] usb 4-1: 0:2 : does not exist [ 1222.794356][T17335] usb 4-1: USB disconnect, device number 21 22:45:43 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x525800) 22:45:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="8e0e1b63", 0x4}, {&(0x7f0000000040)="0790f56198d3cb824984d185ca0544279a72b73f110e6e017f14d90d180204de6946cc87d6e580c2552d27d0f5c81d15628215522eefc51656f4545ec11cec655e2ed741145ccf525b5aebd410de4633e9f837a508cd9083a92fb63d73ab14a65fcfda6a", 0x64}, {&(0x7f0000000180)="b5306b0e97177145f3a92169c6251075c940df2f9cf0f1a3b8024ad94a8b1acdd2a901b496fcf074789cec2c1acc12442c8d26e8bfa27811f7ed368d0e414064a04bf9ef43e8ee7b339c40f337aacfc9f55359ba4eb1d133f16252e0898f208d1c5afa77efae6fd69e239e66ea29f9dac6e979e952bbd3688b5a28c27ef381556bacffae5b82696c4a5e55662d437f5ef490cad3fd325df70de6728f03840eebf6b940d5e9b64b73f0fb9e0594b384d54855a9f3bbbc8b0f63dba95544d51987205bc02c4ccb08ab44bfff53e1659de56607ea32bb3a01f6fa13", 0xda}], 0x3) 22:45:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 22:45:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000050e3900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "cb94181c5b275da5", "910ddcba1241d7180c91d541e59389eab6ec3f7001f0b5f13b25249778f2b030", "c9039307", "9c06b8553e59d17c"}, 0x38) 22:45:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:43 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f0000000640), 0x0) 22:45:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000f3900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:44 executing program 3: syz_open_dev$mouse(&(0x7f00000001c0), 0xffffffffffffffff, 0x135040) 22:45:44 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0xc0501, 0x0) 22:45:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x4) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="8e0e1b63", 0x4}, {&(0x7f0000000040)="0790f56198d3cb824984d185ca0544279a72b73f110e6e017f14d90d180204de6946cc87d6e580c2552d27d0f5c81d15628215522eefc51656f4545ec11cec655e2ed741145ccf525b5aebd410de4633e9f837a508cd9083a92fb63d73ab14a65fcfda6a", 0x64}, {&(0x7f0000000180)="b5306b0e97177145f3a92169c6251075c940df2f9cf0f1a3b8024ad94a8b1acdd2a901b496fcf074789cec2c1acc12442c8d26e8bfa27811f7ed368d0e414064a04bf9ef43e8ee7b339c40f337aacfc9f55359ba4eb1d133f16252e0898f208d1c5afa77efae6fd69e239e66ea29f9dac6e979e952bbd3688b5a28c27ef381556bacffae5b82696c4a5e55662d437f5ef490cad3fd325df70de6728f03840eebf6b940d5e9b64b73f0fb9e0594b384d54855a9f3bbbc8b0f63dba95544d51987205bc02c4ccb08ab44bfff53e1659de56607ea32bb3a01f6fa13", 0xda}], 0x3) 22:45:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000603900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:44 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x80a02, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x3}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140), 0x2) 22:45:44 executing program 5: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}}, 0x0) 22:45:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:45 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000700)=""/3) 22:45:45 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) 22:45:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x184102) 22:45:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x4) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="8e0e1b63", 0x4}, {&(0x7f0000000040)="0790f56198d3cb824984d185ca0544279a72b73f110e6e017f14d90d180204de6946cc87d6e580c2552d27d0f5c81d15628215522eefc51656f4545ec11cec655e2ed741145ccf525b5aebd410de4633e9f837a508cd9083a92fb63d73ab14a65fcfda6a", 0x64}, {&(0x7f0000000180)="b5306b0e97177145f3a92169c6251075c940df2f9cf0f1a3b8024ad94a8b1acdd2a901b496fcf074789cec2c1acc12442c8d26e8bfa27811f7ed368d0e414064a04bf9ef43e8ee7b339c40f337aacfc9f55359ba4eb1d133f16252e0898f208d1c5afa77efae6fd69e239e66ea29f9dac6e979e952bbd3688b5a28c27ef381556bacffae5b82696c4a5e55662d437f5ef490cad3fd325df70de6728f03840eebf6b940d5e9b64b73f0fb9e0594b384d54855a9f3bbbc8b0f63dba95544d51987205bc02c4ccb08ab44bfff53e1659de56607ea32bb3a01f6fa13", 0xda}], 0x3) 22:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:45 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0), 0x6d) 22:45:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 22:45:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:46 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000180), 0x0) 22:45:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) 22:45:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:46 executing program 5: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={0x0}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/149) 22:45:46 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_delroute={0x78, 0x19, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x0, 0xff, 0xfe, 0x3, 0x0, 0x8, 0x1200}, [@RTA_ENCAP={0x24, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x20, 0x1, [{0x101}, {0x7, 0x0, 0x1}, {0x7}, {0x4}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}]}}, @RTA_TABLE={0x8, 0xf, 0x10000}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_MULTIPATH={0xc, 0x9, {0xfffa, 0x4a, 0x1}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x25}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) splice(r1, &(0x7f0000000100)=0x100, r0, &(0x7f0000000180)=0x660, 0x80, 0xb) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r3, 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000600)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x6, 0x5, 0x4, 0x9, 0x19, "9dffc7af12299f13422ea350f96fe6de3ca6a6"}) 22:45:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1226.782499][T21348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.804946][T21348] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:47 executing program 5: socketpair(0x1d, 0x2, 0x2, &(0x7f0000000100)) 22:45:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) 22:45:47 executing program 4: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_delroute={0x78, 0x19, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x0, 0xff, 0xfe, 0x3, 0x0, 0x8, 0x1200}, [@RTA_ENCAP={0x24, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x20, 0x1, [{0x101}, {0x7, 0x0, 0x1}, {0x7}, {0x4}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}]}}, @RTA_TABLE={0x8, 0xf, 0x10000}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_MULTIPATH={0xc, 0x9, {0xfffa, 0x4a, 0x1}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x25}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) splice(r1, &(0x7f0000000100)=0x100, r0, &(0x7f0000000180)=0x660, 0x80, 0xb) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r3, 0x0, 0x0) (async) write$evdev(r3, 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000600)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x6, 0x5, 0x4, 0x9, 0x19, "9dffc7af12299f13422ea350f96fe6de3ca6a6"}) 22:45:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc008ae05, 0x0) 22:45:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1227.459404][T21364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.522118][T21366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.564059][T21364] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_delroute={0x78, 0x19, 0x200, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x0, 0xff, 0xfe, 0x3, 0x0, 0x8, 0x1200}, [@RTA_ENCAP={0x24, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x20, 0x1, [{0x101}, {0x7, 0x0, 0x1}, {0x7}, {0x4}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}]}}, @RTA_TABLE={0x8, 0xf, 0x10000}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010101}, @RTA_MULTIPATH={0xc, 0x9, {0xfffa, 0x4a, 0x1}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x25}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x20000004) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) splice(r1, &(0x7f0000000100)=0x100, r0, &(0x7f0000000180)=0x660, 0x80, 0xb) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r3, 0x0, 0x0) (async) write$evdev(r3, 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000600)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x6, 0x5, 0x4, 0x9, 0x19, "9dffc7af12299f13422ea350f96fe6de3ca6a6"}) 22:45:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}) [ 1228.140448][T21385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1228.223476][T21387] xt_CT: You must specify a L4 protocol and not use inversions on it 22:45:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x80) 22:45:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:48 executing program 3: r0 = socket(0x1e, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) 22:45:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="04007a746e6c32000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"]}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xdc5]}, 0x8, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x9, 0x3, 0x4, @mcast2, @mcast2, 0x8000, 0x20, 0x9, 0x3}}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@private0, 0x0, r7}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x61, r7}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x20, 0x5, 0x1, {{0x22, 0x4, 0x0, 0x1a, 0x88, 0x64, 0x0, 0x5, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x4, '\"V'}, @timestamp={0x44, 0x20, 0x18, 0x0, 0x0, [0x100, 0x9, 0x1, 0x401, 0x800, 0x4, 0x7]}, @lsrr={0x83, 0x13, 0x3a, [@rand_addr=0x64010102, @broadcast, @loopback, @remote]}, @generic={0x82, 0x8, "84dbdc05dab9"}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x7, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffff001}, {@multicast1, 0x7}, {@broadcast, 0xace}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1cc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) write$evdev(r1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x97) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x121002, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) lseek(r10, 0x8, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x541c, &(0x7f0000000080)) 22:45:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 22:45:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0x5452, 0x0) 22:45:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, 0x0, 0x0) 22:45:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="04007a746e6c32000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"]}) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xdc5]}, 0x8, 0x80000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x9, 0x3, 0x4, @mcast2, @mcast2, 0x8000, 0x20, 0x9, 0x3}}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@private0, 0x0, r7}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x61, r7}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x20, 0x5, 0x1, {{0x22, 0x4, 0x0, 0x1a, 0x88, 0x64, 0x0, 0x5, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x4, '\"V'}, @timestamp={0x44, 0x20, 0x18, 0x0, 0x0, [0x100, 0x9, 0x1, 0x401, 0x800, 0x4, 0x7]}, @lsrr={0x83, 0x13, 0x3a, [@rand_addr=0x64010102, @broadcast, @loopback, @remote]}, @generic={0x82, 0x8, "84dbdc05dab9"}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x7, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffff001}, {@multicast1, 0x7}, {@broadcast, 0xace}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1cc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) write$evdev(r1, 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x97) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x121002, 0x0) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) (async) lseek(r10, 0x8, 0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x541c, &(0x7f0000000080)) 22:45:49 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)=0x64) 22:45:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:49 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 22:45:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, 0x0, 0x0) 22:45:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="04007a746e6c32000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000400000000000000005451800d400670000092990780000000000000000860d000000030507ef388c57f39404010044249e7b82342489fa76a3e000001000000004fe06347100000000060000d5e30000000200000004000000008631000000030105a96f8507050b03d5fe5d0d88a81fe30503370004c6fc940400008307f9ffffffff444ca4017f000001000000077f000001000000070000000000000800079ec54a93ac1414aa00400000e00000024e192ea4ac1e0107000001936405010000007fff0a010101000000006401010600000020000000a579e6d6a0a7681b65a7b4efbc660eb5e8b7d9d5d0f54a8eccd028a8278e6c9b2d2d6ed64c49255b9326badaae320c5926f6061a8681ff6cb094894e61e224fbe106de8d9df16afd70bb6dfbc936f1be28266302eec6e633"]}) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xdc5]}, 0x8, 0x80000) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x9, 0x3, 0x4, @mcast2, @mcast2, 0x8000, 0x20, 0x9, 0x3}}) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000140)={@private0, 0x0, r7}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2, 0x61, r7}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x20, 0x5, 0x1, {{0x22, 0x4, 0x0, 0x1a, 0x88, 0x64, 0x0, 0x5, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x4, '\"V'}, @timestamp={0x44, 0x20, 0x18, 0x0, 0x0, [0x100, 0x9, 0x1, 0x401, 0x800, 0x4, 0x7]}, @lsrr={0x83, 0x13, 0x3a, [@rand_addr=0x64010102, @broadcast, @loopback, @remote]}, @generic={0x82, 0x8, "84dbdc05dab9"}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x7, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffff001}, {@multicast1, 0x7}, {@broadcast, 0xace}]}]}}}}}) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1cc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async, rerun: 32) write$evdev(r1, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x97) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x121002, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) (async) lseek(r10, 0x8, 0x4) (async) ioctl$TIOCL_GETMOUSEREPORTING(r10, 0x541c, &(0x7f0000000080)) 22:45:49 executing program 5: pselect6(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 22:45:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 22:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, 0x0, 0x0) 22:45:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1=0xe0000003}, {0x2, 0x0, @broadcast}}) 22:45:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8953, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 22:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 22:45:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "1c3d0b3badcb7ff4aa0874323796"}, 0x12) 22:45:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 22:45:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'raw\x00'}, &(0x7f0000000080)=0x54) 22:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 22:45:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "1c3d0b3badcb7ff4aa0874323796"}, 0x12) 22:45:51 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 22:45:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x61) 22:45:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 22:45:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f0b00000000000000000700bd2744"], 0x24}}, 0x0) 22:45:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "1c3d0b3badcb7ff4aa0874323796"}, 0x12) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "1c3d0b3badcb7ff4aa0874323796"}, 0x12) (async) 22:45:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x4, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 22:45:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 22:45:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x6, 0x81, 0x0, &(0x7f0000000180)) 22:45:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="e5", 0x1}, {&(0x7f0000000200)='+', 0x1}], 0x2}, 0x0) 22:45:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8000) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 22:45:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) 22:45:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78) 22:45:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 22:45:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8000) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:52 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 22:45:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 22:45:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:53 executing program 3: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140), 0x0) 22:45:53 executing program 5: r0 = socket(0x2, 0x6, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 22:45:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (rerun: 64) ioctl$KDADDIO(r1, 0x4b34, 0x8000) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:53 executing program 3: socketpair(0x23, 0x0, 0xffffff7f, &(0x7f0000000140)) 22:45:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:45:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x40, 0x6, 0x80000000, {{0x26, 0x4, 0x2, 0xe, 0x98, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, {[@timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x40000}, {@empty, 0xf3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6ea}, {@multicast2, 0x6}]}, @rr={0x7, 0x1f, 0x1d, [@broadcast, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @multicast1]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x3, '0'}, {0x5, 0xf, "7ee635a523473454d6d13bec2a"}, {0x6, 0x3, 'o'}, {0x2, 0x11, "6c44d72875716646564aa567373874"}, {0x1, 0x12, "cff0f2dacf96931bc8918ae14158c599"}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c0785d7b12cd9f93139038d9fe078754746044006a5899fe1c80446fbf465e44b16600fbca012b2ce18e9226e87e0ea07079cdd26b09cdfbe42ba1cd3653f9b7ae07288d2022fe2cda059170d6bd7b8fdef27562e839aca3c7d09cb25f6a0fbffdebd877449786b5bc49b96ba2051c1946fe85a76479932ef66ae5ad0b0dd4dce5e47a", 0x83}, {&(0x7f0000000100)="7bf01e39f9f598c293571b019a201b18b108c565ec4fa468c1013191866767db868daf", 0x23}, {&(0x7f0000000180)="7023865a795732b0760953982ae18a0363084ca2c973d522e448376869d38af925e47760b8c4f72740c2d0222930ca32781d5d23af8e3b69155ba9972e82753a1064ba572dd35f0c31cb4d74fe5f14757b4227338543afbe6f382de2eee323d79bcdf8ed72ff145d54d129d43d6ae1ebac629e6916d9d26422cb3103afc414086ee215b3ccc65dcd6d837a45bfacda78bdc7575e90aebca714c227fa42fb271f5bace939eead1da8dd7fe809dd577fdfae51afe7ef536b78a2ee0dc063aad420865bb9da07812d2d5ca93fce942af0e17f3cf6f5829f3de221f16940a309f122", 0xe0}], 0x3, &(0x7f0000000440)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x3c, 0x1, '\x00', [@pad1, @jumbo, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r2}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000029000000080000000300000000000000300000000000000029000000040000003302000000000000010100c91000000000000000000000ffff0a010101000000140000000000000029000000430000000100000000000000900000000000000029000000370000002c0e000000000000040120c910fc010000000000000000000000000000805b622d0addd310ea8cfe3f39b495b23e80ed1f0021a0f5734c2441e297537fa97a377d4612437765ee0b4dee8d9c9253669f1a009c8bea8a542563894f37e69810801f5bb881a1a9c6a97d019f5150657c02dce0859fbbfd1a9977a2023e9cef5404"], 0xf0}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="1f41525351070b3dd915be435e537184a0dc2b3c5e02c8b37f730d4bc5c252491af724b7e2721818be34cf2fb95918d83ee6f5975869636a1ff50653b7aa082fbb03d68ed1816ed1303004fa0979c1fdcf5801a0b494401fb54a13a88cebdbecac05095132e0adbe288a80564acf3b294efbd163466c79ef816975258c2c2ff76f22fcdd2d011aba1e44df93eaf8ca865c3fd96574ba90ecabdda0bd0999f8e65647572ac335bdb3d38385eff59cb625e9410335d78a31d34eff6b3b4df88edb36b0516be4d8f21a042294583d14c3e7d6aec0d28310e3391e55fd7329a08732f22944985b3607", 0xe7}, {&(0x7f00000007c0)="276a4dc015120f9d1fc06cf41567", 0xe}, {&(0x7f0000000800)="d4087c19dc62c8d6d8ce2124c604095da11da46801fa1adc6883cfee41e3fd5cf2973424ac70cb1dd256f369ad53eab415c8bef0da1f3a544b08bcd2a5f525a41fa1614507c48b52396e81dfd5d0664b51f91fe141a3b7d4feebbeac9ba02022dfc99f0cddc560e2e2e20d59d9257ee2a89e2cc6037c39f79aeb0ea8ec0bb806f64c30a4e17bdc62174f01f420d4bdd9", 0x90}], 0x3, &(0x7f0000000900)=[@dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @hopopts={{0x98, 0x29, 0x36, {0x84, 0xf, '\x00', [@generic={0xff, 0x4b, "f816fb54b5960ed7f5dcbeb60f2d67d620aef6e52dbc4de4f6e95585dc76674f9f361025ae74d5edf98619c321ba0bb396946b831f8572d2becfd87d1ab8377416759aafa3afa1f1865f86"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x3, [0x4, 0x1, 0x4, 0xffffffffffffffff]}}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0xff, 0x4, 0x2, 0x5, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x28}]}}}], 0x120}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x8, @private1, 0x1}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="aac0d94d33c9a76bf176e1fba0f0da0d03266621dbe7c04f6508e2c87073bb81b36c1415db1191b4fca382680d9fb0930890507a5ea6a977a7c1cdc1430eafa75b6e5a77577e9933d108225b21cc7255630b3c54c43095c75125a3b167711d6155ad3879a38c634ddded5550b82a11f7030fa42055fb3a97019781ee4d3a61b416056eff5ac9bc308d51da67dc9c96f48d8c509d3d2769b32cc098e4b3d6c810915944b25d2bd5dd88473d1966b445bf4c0881feddfff0370f837cb6131d04694d99cec9de1224181341c95130a515a989532af56e29691201c44936c7757380007d638721", 0xe5}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="22c8cda308c2675a47ddc77963ac7f001c5f5e8ef4f439de830d52fcb557e79478d7c3f2344e5813c302489166", 0x2d}, {&(0x7f0000000c00)="1c4fecf896dfa91c8cc6fa8921956dcd6e1aaae23c60883d7b612c0ab0963e47393d0c8b6e3fa331719c3d6f498485862ea426f0bc013593d859001dc6fad5845b53bcb880fe4f17f45bbb7dc66b33a080147fc01f567582f553ad80d7134325662ec9c4d0174d6950c054e1fd956adaefe86055af594449440ca2bfd8a5e26955a75251e30857d02be9363e6508e256a7bca8b287c6", 0x96}], 0x4, &(0x7f0000000d00)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffb}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x8000, [0x63]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}], 0x90}}], 0x4, 0x881) 22:45:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104000000f5ffffffffffffff00", @ANYRES32=r1, @ANYBLOB='\v'], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000104000100"/20, @ANYRES32=r3, @ANYBLOB="82"], 0x20}}, 0x0) 22:45:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:54 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x4}, &(0x7f0000000080), &(0x7f0000000100)={r0}, 0x0) [ 1234.042160][T21556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 22:45:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x40, 0x6, 0x80000000, {{0x26, 0x4, 0x2, 0xe, 0x98, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, {[@timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x40000}, {@empty, 0xf3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6ea}, {@multicast2, 0x6}]}, @rr={0x7, 0x1f, 0x1d, [@broadcast, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @multicast1]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x3, '0'}, {0x5, 0xf, "7ee635a523473454d6d13bec2a"}, {0x6, 0x3, 'o'}, {0x2, 0x11, "6c44d72875716646564aa567373874"}, {0x1, 0x12, "cff0f2dacf96931bc8918ae14158c599"}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c0785d7b12cd9f93139038d9fe078754746044006a5899fe1c80446fbf465e44b16600fbca012b2ce18e9226e87e0ea07079cdd26b09cdfbe42ba1cd3653f9b7ae07288d2022fe2cda059170d6bd7b8fdef27562e839aca3c7d09cb25f6a0fbffdebd877449786b5bc49b96ba2051c1946fe85a76479932ef66ae5ad0b0dd4dce5e47a", 0x83}, {&(0x7f0000000100)="7bf01e39f9f598c293571b019a201b18b108c565ec4fa468c1013191866767db868daf", 0x23}, {&(0x7f0000000180)="7023865a795732b0760953982ae18a0363084ca2c973d522e448376869d38af925e47760b8c4f72740c2d0222930ca32781d5d23af8e3b69155ba9972e82753a1064ba572dd35f0c31cb4d74fe5f14757b4227338543afbe6f382de2eee323d79bcdf8ed72ff145d54d129d43d6ae1ebac629e6916d9d26422cb3103afc414086ee215b3ccc65dcd6d837a45bfacda78bdc7575e90aebca714c227fa42fb271f5bace939eead1da8dd7fe809dd577fdfae51afe7ef536b78a2ee0dc063aad420865bb9da07812d2d5ca93fce942af0e17f3cf6f5829f3de221f16940a309f122", 0xe0}], 0x3, &(0x7f0000000440)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x3c, 0x1, '\x00', [@pad1, @jumbo, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r2}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000029000000080000000300000000000000300000000000000029000000040000003302000000000000010100c91000000000000000000000ffff0a010101000000140000000000000029000000430000000100000000000000900000000000000029000000370000002c0e000000000000040120c910fc010000000000000000000000000000805b622d0addd310ea8cfe3f39b495b23e80ed1f0021a0f5734c2441e297537fa97a377d4612437765ee0b4dee8d9c9253669f1a009c8bea8a542563894f37e69810801f5bb881a1a9c6a97d019f5150657c02dce0859fbbfd1a9977a2023e9cef5404"], 0xf0}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="1f41525351070b3dd915be435e537184a0dc2b3c5e02c8b37f730d4bc5c252491af724b7e2721818be34cf2fb95918d83ee6f5975869636a1ff50653b7aa082fbb03d68ed1816ed1303004fa0979c1fdcf5801a0b494401fb54a13a88cebdbecac05095132e0adbe288a80564acf3b294efbd163466c79ef816975258c2c2ff76f22fcdd2d011aba1e44df93eaf8ca865c3fd96574ba90ecabdda0bd0999f8e65647572ac335bdb3d38385eff59cb625e9410335d78a31d34eff6b3b4df88edb36b0516be4d8f21a042294583d14c3e7d6aec0d28310e3391e55fd7329a08732f22944985b3607", 0xe7}, {&(0x7f00000007c0)="276a4dc015120f9d1fc06cf41567", 0xe}, {&(0x7f0000000800)="d4087c19dc62c8d6d8ce2124c604095da11da46801fa1adc6883cfee41e3fd5cf2973424ac70cb1dd256f369ad53eab415c8bef0da1f3a544b08bcd2a5f525a41fa1614507c48b52396e81dfd5d0664b51f91fe141a3b7d4feebbeac9ba02022dfc99f0cddc560e2e2e20d59d9257ee2a89e2cc6037c39f79aeb0ea8ec0bb806f64c30a4e17bdc62174f01f420d4bdd9", 0x90}], 0x3, &(0x7f0000000900)=[@dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @hopopts={{0x98, 0x29, 0x36, {0x84, 0xf, '\x00', [@generic={0xff, 0x4b, "f816fb54b5960ed7f5dcbeb60f2d67d620aef6e52dbc4de4f6e95585dc76674f9f361025ae74d5edf98619c321ba0bb396946b831f8572d2becfd87d1ab8377416759aafa3afa1f1865f86"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x3, [0x4, 0x1, 0x4, 0xffffffffffffffff]}}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0xff, 0x4, 0x2, 0x5, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x28}]}}}], 0x120}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x8, @private1, 0x1}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="aac0d94d33c9a76bf176e1fba0f0da0d03266621dbe7c04f6508e2c87073bb81b36c1415db1191b4fca382680d9fb0930890507a5ea6a977a7c1cdc1430eafa75b6e5a77577e9933d108225b21cc7255630b3c54c43095c75125a3b167711d6155ad3879a38c634ddded5550b82a11f7030fa42055fb3a97019781ee4d3a61b416056eff5ac9bc308d51da67dc9c96f48d8c509d3d2769b32cc098e4b3d6c810915944b25d2bd5dd88473d1966b445bf4c0881feddfff0370f837cb6131d04694d99cec9de1224181341c95130a515a989532af56e29691201c44936c7757380007d638721", 0xe5}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="22c8cda308c2675a47ddc77963ac7f001c5f5e8ef4f439de830d52fcb557e79478d7c3f2344e5813c302489166", 0x2d}, {&(0x7f0000000c00)="1c4fecf896dfa91c8cc6fa8921956dcd6e1aaae23c60883d7b612c0ab0963e47393d0c8b6e3fa331719c3d6f498485862ea426f0bc013593d859001dc6fad5845b53bcb880fe4f17f45bbb7dc66b33a080147fc01f567582f553ad80d7134325662ec9c4d0174d6950c054e1fd956adaefe86055af594449440ca2bfd8a5e26955a75251e30857d02be9363e6508e256a7bca8b287c6", 0x96}], 0x4, &(0x7f0000000d00)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffb}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x8000, [0x63]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}], 0x90}}], 0x4, 0x881) 22:45:54 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 22:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890d, 0x0) 22:45:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private}, {0x0, @broadcast}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg2\x00'}) 22:45:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:55 executing program 3: r0 = socket(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000), 0xc) 22:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:55 executing program 5: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 22:45:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x40, 0x6, 0x80000000, {{0x26, 0x4, 0x2, 0xe, 0x98, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, {[@timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x40000}, {@empty, 0xf3}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6ea}, {@multicast2, 0x6}]}, @rr={0x7, 0x1f, 0x1d, [@broadcast, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @multicast1]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x3, '0'}, {0x5, 0xf, "7ee635a523473454d6d13bec2a"}, {0x6, 0x3, 'o'}, {0x2, 0x11, "6c44d72875716646564aa567373874"}, {0x1, 0x12, "cff0f2dacf96931bc8918ae14158c599"}]}, @end]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="c0785d7b12cd9f93139038d9fe078754746044006a5899fe1c80446fbf465e44b16600fbca012b2ce18e9226e87e0ea07079cdd26b09cdfbe42ba1cd3653f9b7ae07288d2022fe2cda059170d6bd7b8fdef27562e839aca3c7d09cb25f6a0fbffdebd877449786b5bc49b96ba2051c1946fe85a76479932ef66ae5ad0b0dd4dce5e47a", 0x83}, {&(0x7f0000000100)="7bf01e39f9f598c293571b019a201b18b108c565ec4fa468c1013191866767db868daf", 0x23}, {&(0x7f0000000180)="7023865a795732b0760953982ae18a0363084ca2c973d522e448376869d38af925e47760b8c4f72740c2d0222930ca32781d5d23af8e3b69155ba9972e82753a1064ba572dd35f0c31cb4d74fe5f14757b4227338543afbe6f382de2eee323d79bcdf8ed72ff145d54d129d43d6ae1ebac629e6916d9d26422cb3103afc414086ee215b3ccc65dcd6d837a45bfacda78bdc7575e90aebca714c227fa42fb271f5bace939eead1da8dd7fe809dd577fdfae51afe7ef536b78a2ee0dc063aad420865bb9da07812d2d5ca93fce942af0e17f3cf6f5829f3de221f16940a309f122", 0xe0}], 0x3, &(0x7f0000000440)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x3c, 0x1, '\x00', [@pad1, @jumbo, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r2}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000029000000080000000300000000000000300000000000000029000000040000003302000000000000010100c91000000000000000000000ffff0a010101000000140000000000000029000000430000000100000000000000900000000000000029000000370000002c0e000000000000040120c910fc010000000000000000000000000000805b622d0addd310ea8cfe3f39b495b23e80ed1f0021a0f5734c2441e297537fa97a377d4612437765ee0b4dee8d9c9253669f1a009c8bea8a542563894f37e69810801f5bb881a1a9c6a97d019f5150657c02dce0859fbbfd1a9977a2023e9cef5404"], 0xf0}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000006c0)="1f41525351070b3dd915be435e537184a0dc2b3c5e02c8b37f730d4bc5c252491af724b7e2721818be34cf2fb95918d83ee6f5975869636a1ff50653b7aa082fbb03d68ed1816ed1303004fa0979c1fdcf5801a0b494401fb54a13a88cebdbecac05095132e0adbe288a80564acf3b294efbd163466c79ef816975258c2c2ff76f22fcdd2d011aba1e44df93eaf8ca865c3fd96574ba90ecabdda0bd0999f8e65647572ac335bdb3d38385eff59cb625e9410335d78a31d34eff6b3b4df88edb36b0516be4d8f21a042294583d14c3e7d6aec0d28310e3391e55fd7329a08732f22944985b3607", 0xe7}, {&(0x7f00000007c0)="276a4dc015120f9d1fc06cf41567", 0xe}, {&(0x7f0000000800)="d4087c19dc62c8d6d8ce2124c604095da11da46801fa1adc6883cfee41e3fd5cf2973424ac70cb1dd256f369ad53eab415c8bef0da1f3a544b08bcd2a5f525a41fa1614507c48b52396e81dfd5d0664b51f91fe141a3b7d4feebbeac9ba02022dfc99f0cddc560e2e2e20d59d9257ee2a89e2cc6037c39f79aeb0ea8ec0bb806f64c30a4e17bdc62174f01f420d4bdd9", 0x90}], 0x3, &(0x7f0000000900)=[@dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @hopopts={{0x98, 0x29, 0x36, {0x84, 0xf, '\x00', [@generic={0xff, 0x4b, "f816fb54b5960ed7f5dcbeb60f2d67d620aef6e52dbc4de4f6e95585dc76674f9f361025ae74d5edf98619c321ba0bb396946b831f8572d2becfd87d1ab8377416759aafa3afa1f1865f86"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x3, [0x4, 0x1, 0x4, 0xffffffffffffffff]}}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0xff, 0x4, 0x2, 0x5, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x28}]}}}], 0x120}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x8, @private1, 0x1}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="aac0d94d33c9a76bf176e1fba0f0da0d03266621dbe7c04f6508e2c87073bb81b36c1415db1191b4fca382680d9fb0930890507a5ea6a977a7c1cdc1430eafa75b6e5a77577e9933d108225b21cc7255630b3c54c43095c75125a3b167711d6155ad3879a38c634ddded5550b82a11f7030fa42055fb3a97019781ee4d3a61b416056eff5ac9bc308d51da67dc9c96f48d8c509d3d2769b32cc098e4b3d6c810915944b25d2bd5dd88473d1966b445bf4c0881feddfff0370f837cb6131d04694d99cec9de1224181341c95130a515a989532af56e29691201c44936c7757380007d638721", 0xe5}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="22c8cda308c2675a47ddc77963ac7f001c5f5e8ef4f439de830d52fcb557e79478d7c3f2344e5813c302489166", 0x2d}, {&(0x7f0000000c00)="1c4fecf896dfa91c8cc6fa8921956dcd6e1aaae23c60883d7b612c0ab0963e47393d0c8b6e3fa331719c3d6f498485862ea426f0bc013593d859001dc6fad5845b53bcb880fe4f17f45bbb7dc66b33a080147fc01f567582f553ad80d7134325662ec9c4d0174d6950c054e1fd956adaefe86055af594449440ca2bfd8a5e26955a75251e30857d02be9363e6508e256a7bca8b287c6", 0x96}], 0x4, &(0x7f0000000d00)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffb}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x8000, [0x63]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}], 0x90}}], 0x4, 0x881) 22:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:55 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0010000800000081fffffffc411d004400650080330490787f"]}) 22:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:45:55 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x35, 0x0, 0x6, 0x8, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:56 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x9}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 22:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}, 0x86}) 22:45:56 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x35, 0x0, 0x6, 0x8, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:56 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) 22:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0xb2f, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x68}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 22:45:56 executing program 4: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x35, 0x0, 0x6, 0x8, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x35, 0x0, 0x6, 0x8, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) 22:45:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x80086601, 0x0) 22:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x12, 0x0, &(0x7f0000000180)) 22:45:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xee, 0x2, 0x5, 0xa5eb, 0x4, 0x6}) 22:45:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8904, 0x0) 22:45:57 executing program 5: r0 = socket(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) 22:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:57 executing program 3: socketpair(0xa, 0x801, 0x0, &(0x7f0000000040)) 22:45:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xee, 0x2, 0x5, 0xa5eb, 0x4, 0x6}) 22:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x54}}, 0x0) 22:45:58 executing program 3: r0 = socket(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) 22:45:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:58 executing program 5: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 22:45:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xee, 0x2, 0x5, 0xa5eb, 0x4, 0x6}) 22:45:58 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000180)) 22:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x4c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}]}, 0x4c}}, 0x0) 22:45:58 executing program 5: clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0) 22:45:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a2, &(0x7f0000000540)) 22:45:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:59 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) accept(r0, 0x0, 0x0) 22:45:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x4c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}]}, 0x4c}}, 0x0) 22:45:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8937, &(0x7f0000000540)) 22:45:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:45:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:45:59 executing program 3: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001100)) socket$can_raw(0x1d, 0x3, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000015c0)) 22:45:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x4c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}]}, 0x4c}}, 0x0) 22:45:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:45:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1a, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 22:45:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8902, 0x0) 22:46:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]}, 0x54}}, 0x0) 22:46:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) 22:46:00 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 22:46:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8943, &(0x7f0000000540)) 22:46:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]}, 0x54}}, 0x0) 22:46:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:00 executing program 4: pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:46:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0x5}}) 22:46:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x54, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]}, 0x54}}, 0x0) 22:46:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40012002) 22:46:01 executing program 4: pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) (async) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) (async) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:46:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:01 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 22:46:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}}, 0x0) 22:46:01 executing program 4: pipe2$watch_queue(&(0x7f0000000540), 0x80) (async) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:46:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:01 executing program 3: r0 = socket(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev, @empty, 0x0, 0x0, 'tunl0\x00', 'bond0\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'xfrm0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="107731a5118a"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 22:46:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) 22:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}}, 0x0) 22:46:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:02 executing program 5: pipe(&(0x7f0000000200)) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000001bc0)={0x8}, 0x0, 0x0) 22:46:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0xf, 0x0, &(0x7f0000000180)) 22:46:02 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 22:46:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x4020940d, 0x0) 22:46:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}}, 0x0) 22:46:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x541b, 0x0) 22:46:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {}, 0x14d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='bond_slave_1\x00'}) 22:46:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x48}}, 0x0) 22:46:03 executing program 4: socket$inet6_icmp_raw(0xa, 0x2, 0x3a) 22:46:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x5460, 0x0) 22:46:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'bridge_slave_1\x00', &(0x7f0000000480)=@ethtool_ringparam={0x11}}) 22:46:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x85, 0x0, &(0x7f0000000180)) 22:46:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891b, &(0x7f0000000540)) 22:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x48}}, 0x0) 22:46:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:04 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) 22:46:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x8940, 0x0) 22:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{}, {}, @device_b, @broadcast, @random="598543986644"}, 0x0, 0x0, @random, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x48}}, 0x0) 22:46:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:04 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11e, 0x23, 0x0, 0x0) 22:46:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 22:46:04 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0) 22:46:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0xc020660b, 0x0) 22:46:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x9, 0x4) 22:46:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x8982, 0x0) 22:46:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000540)) 22:46:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000023900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:05 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 22:46:05 executing program 1: r0 = socket(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) 22:46:05 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, 0x0) 22:46:05 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 22:46:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x10f}) 22:46:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000033900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x101}) 22:46:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:06 executing program 1: r0 = socket(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x90, [], 0x0, 0x0, &(0x7f0000000280)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x108) 22:46:06 executing program 5: syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0]}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 22:46:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x300}, 0x0) 22:46:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000043900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:06 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x300, 0x0, 0xe8ecff7f00000000}, 0x0) 22:46:06 executing program 1: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x45a002, 0x0, 0x20}, 0x18) [ 1246.809023][T17335] usb 6-1: new high-speed USB device number 15 using dummy_hcd 22:46:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000053900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1247.213058][T17335] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1247.222688][T17335] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1247.233929][T17335] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1247.247067][T17335] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 22:46:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7}, 0x48) 22:46:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) dup3(0xffffffffffffffff, r3, 0x0) [ 1247.258712][T17335] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1247.268912][T17335] usb 6-1: config 1 interface 1 has no altsetting 0 22:46:07 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x13, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb}]}}) 22:46:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000063900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1247.672737][T17335] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1247.683070][T17335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.691346][T17335] usb 6-1: Product: syz [ 1247.695986][T17335] usb 6-1: Manufacturer: syz [ 1247.700811][T17335] usb 6-1: SerialNumber: syz 22:46:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="75c991b33ffb3702950faea4b9a6c50951a3c5ba9e548c2cbb80fb61a0c5f029b42dde3189fda6820ae1e7e8cf20db71c1298a751e0add948ad75fff2e734a8d608c2c50abca15afb8cab363e64e41c73ab78a422b515d96889820665a77df82b93136ce714b600c1c84ff4fe1f8ec53d4c388fce0962bb59685f4511f962eb028ff50199bdb125b278935bdeb4dda2aac377b34fa8bf64bc63a0ac75ab7a28e38278baa47a3e60aea667699f963b6f5154c534a7d81153875c3c4dcc788c047a5ab3272753de78db40678a664092569dd65aa84bdac0caab47297d49a2310652f9934cf7952c16e10a7d2b0f9a5ee854c97cdf73299263a067e5d75eb17e640a0ca3af1537a38d128fdb4285dcfaba771f9cda50128abf9ceb895acabdf91b51bf74c991f287334808ec75944ca869a23b1cfe8eb08df8a90ff62407ce277302221536b8f3646a4776443ce8d3cd42e3ae7048a68fd251cf2cc80719fb208db9a39438cd23e4b08cf8b624fa9c4c1bf20f48055ab6883f93527e2402cc875f168bdc952d1f56b2b157b04537c028cb199e92db8b5179d89d42592cb9bee73a6619cab3de218546b58685f41cc1bb8f287400e64a25bf8c219686b31294778065e9a73edc266aa2fdbca110c49b166bd648f95d1f3a71daf6639f33ca663dd0319c308ff4d32e6e36b1a43fcab6a46d1c7806e85ff17decdc634479d7fff559c3bd4c03ae3560e92dbb2e1e7096ed8af6924d48da7a57978709e349f2ad9a9e4402803104b6b2e668dd831d2987e590cdedf277029fcceffa4e67fc97566d47965d635c9c8ffc8d772228f636e18b2af87b0158cf84740283f18300ae2d2c449f7cb9a44869fffbb2ca0713a1765bb597f60f3e1e05e6b0689caec031599ee76ecff25095351eb8edb1c10b261083a371af332e75cae8af502757b33c6c790ed3ec639d982cbc655548788791addb5ad5debdfd78f3fafdd0478cfb9b9ac9e7123be0e80b00367144619b74d29169a4ccae6975384ee1c40b5cf1b30a378618fbcb4a930ac050344389cf7df8a808d893a95f8028b437dac1e75e19db34df97ff9522bb529e521c9343dcd400135f56be98e1e3dbbf98f8456a08ea86fcab67d5a9b964aca8f332e7fe94598a950428749eaacc0bd5715e2d925accbf6a8e389a512aea0c2ea6adea67696786f63ec211033cd6863ee3acf55cf987a7a5559537ac2a2680631186825f3418ed98d793542c5719c6d3199ce73c14c1c19a81ad751ccf9130a5492ec95502331cd9b341227bbe7101232dc7b8d3d5d8c94d8395c586e5ec21da25301594643086f9bf5cad54350a2d6a8e7b921d5f8282b23b950e7a178b116da477e6866c8797e7b6bbe65a313bae934fc9c3c285ae4169e07020a93396849ef1932bcb9239833302afb78ea6c5f484a8fd769cb6793cdfd26ef26e6d2da1bdfaed6157db7aeb96c4081bf08b7cd1021a73b32a06ef7887a3c53055c7ce1a465286a4f68add859d6871b0cef6c8af2e73f99687326ebfc86535c4a52e9f9f3a33a80fc1c2157363c7aaa091398aeb8a1b83112ee141578c40027f5d16db1be7281168236b6a1e95204c2774f4f4a0d80a9890759926c678371b95e45d5bc079b9826a6a494e59a73b4f9b6783c230fd85336d214199898a21499e95d85af10db0a4e9e1da1cca54788c00d6efa570a5dcb921a895025da33e4ec967087d642d663135a930f108ee77d38b1da83581081e0d048546ade136df158be8aad660cd4c2d8b94cdbbbec50d622f53d7a9517d3e41ca737ecea5fc31e69c1b2c3ef2a0f9fe35ff244827083ab84da06be611acabcb34fe536705a57dd633fce8968d17836ee55e9ee970d22c606399db001cfc0a6de3a6b995150bb6544cfb6201990f52c77365f52b06b8a108ef14254743c715059f5deb9d5a52fbc74fd34c9c193da6bec6fdf2f154b6d30e9b5140e29aa4ef7d7b710df266ba0cf5f5d0d9919da40ae29724df23cbcaa0abba40b0692131d7d714b536f8a8e7dfc5a0c6519ff0e7ab6faac698d89fb84c325ccb7c5e99d4baa601e36981c21fe9a0282b0d6018923c6f0865c182ab3536926b2080df408dba4d6d5a7af28b8a9bece05aaee8eada26d76206b863779477f1914a69bbf99e94f501616d8709325ad2e9054ff98386ad53e62ea3f5c85558ef3ac1155999712c8c1b8581b6fa529d4922552b7d43c6248241a175eb5ecc61643075388729dcd147217afce04361525d1997205faf0e9f262985d03cc817bb7de2e3b1668631fcd96429ef220ae92793775c41d6f54eb4766d6ad8c7341e6b17b7db501dae33b159d8cddd7b78f88c0364631f5b38ed3b8474064e838fcf3bbdc4fca978b0119da169c9838eec21006550d8e04fa364e9d798e6daba6c70928056da413d1a1c6acc9e8c07e064efcabb9f73a68845c1f612d97d5d8826e26c01151d1fae48133acce4a19c880ad240dc76c87c4158fa0014b7b698c4a9c6da2744742cdfe6600d9408b3a041fd98ee068779a55ab9aa438ed6eb7e37eb71ce6ba9c8aac0af603fdf0c7b21019906942256433e8976ffa262254c768a9572262856da9abc7561d33907984f67122de1ed4ceb4ba954660a6cebef26aba540c371b0e14081cced5059a9a8547638f9fe47891f12b417803032d89862063a45917543d3325383a109f964b0d1ee6ca1f49f04a061ed2521a296b877a75e5da568efad3f733c57335b1f3b2d9b639f461378a936fe427812e901076ef49a479d39ff8986203416b87a79358484351d6837d26393766a6ac0cb21ba917d6ca737ee561cd056312d354f7193d76fb44233e851e1febebd4242f5c1e1b3c55842ab8e0b2d2731ad8320d124d9eebf31ac898c7aed96041db791dfa85a918c300a39db4ad1f3d83f3f64504562407d3047d511f686a738c352dbdf4834ce0dcc36dfa90f42d7128f07214d1fbc904f0215315f1682f5b37586ac39354fc00bb6fb8a2f7327a6974547e95b0bce59762fee0023bc86f0ead4087a3136884dae1ccb81d93908ae68bc25340c5bb86a4f6c58d78ec3da7f508629a8234b9aea9c20aace0635044d278bba0678c401a557facfaff27286cd8f123af66974a50b5a537b4ab3f65c6a9d848474ec4d3ae680ff737f20b14bcb6d2572db2ed7e41e4bb853787fffadc3b114ae2c1aa3ff980ce665234b42c93c3b8f2e68b9b377e26aef737de1bd5e8b676ededff46f8b7542b1895310dee40d76d5126d087a0bb4a91bb23f09d3553ed32e3a125e6e246271e12fc4e56abe888c2df1258729b2cfd89422a3e63713a65570d68d98b3e9c146089e87bc2fd7cf186b790745f4c65554e8d8ff58a38aafd5a9e5943041e8e011f95fe990a6fccd0150ff8b6831f74c816191bc6bcd8531c18a3448494db1a95f47236fa42f7c3727dfbbd79621a83ef4e4de8f0fd59e653bc5e7fcd13ae3da41be5e8cbb43105fe68be1b47354b338510d4b8321a363d74f5bff9b40032cf981834d79823d157f2eb514b4a7c4d5acfccb4514e474848e2ee0c68cc48388b5fcb85a481774901fa0d63640c2d32b96e66a8bde12e8723c6882c27987f4d10345fa3596f69ae44cddef71b7e10bce700f9a4eb3429a6514419d8d8ce64dfe8fe9b673ea117d66cba94def0544090f91df29290e2af24b14b9b95340971b0112741ac81b05c825c25397c3dc4f8a77bf2998b42c92e957096c9b9c5a2c1fe375970162556a46499ecd9d3bb53c9ad375201c233b3472aac50c40b54fc0da72647cd936b3a2f274bdf5245603808e0bbf658616cc7ef6f68eb63ef0f8e752c1e7410a163d9582db51eab272213210faef913d387e0fd2f9b7952e754cc031be29584f1d6f4fa8a44eab57d630d1c850cb164d1516a29aeb7e3b43e91110502f251955a2c3e8bee3d5044898f9c86f7e24e69776508d1bb1c79b6aecaf14d4788391a60a8e5099a6014e93793bfe2cf02b56b144e99d530581d152546e051bf25f7f83097f748e65c249b478bc54ca5c3a383d3ee3d9cf3117d0476a09a933910c88444c6450e42e76a3d8121cf41efd6c01f798b9c854539d213277b83bdb0fba60a2ebd4fb86e6cdee7f0894c437c49c8149407c28cf851cccf7bf8a23610d55664fe108a5e2fb36f30d764c79839a4b08af8d1cfab698ca3edba1fec77a5f51c8041dd2fc46b61efa3f3636fdada826d01a097ed12032b10bc046a2632b011cd8f126d924fca00b0884b9dd8ec77e3f9af9fb892cc4ea65d8efa01f7e8371b00239bcb9461ed2134de71b8f42b89f1419f7d4a2a987141faafc456a24ac39bfe3351431a39d7ba8438d2f5003c80cd980dd393c21b460f56d4e3ec93f1b1671bea43ad726a2c22436e616fc22eab8ef1ac4a7ede3f91c84a310313d4fed7048e29285465869dee1fe16882cdcd4da876714125f4cc310870976519a01c5124366379e8f54bca1217ca2fa68b3fa5b1f54bf662e6f509b386b7c0beed2b2b7be42f52351f99f8b2e5aabfcf3932302dc7e8f5e0c0ae107a4e0464e1d578a961e65d0ba82d52078fc61f2a7f1894f2978fa8c30a0bc435012aa86896256e1133f28427f63c52abef04e3785833d36903128fc2c5b4bcfc1ac4bcdd47aa7f12bfb08c1bd9e7ba182df8a3ef330ad7a42e74629062bb04cad88424eeff2d2049fe02e20257a3574e90ed21d2d878b2f8bdafd1ba32404ad5500d6b8c9ef91b1f155189e4c88e4d6031c5d337f00919fd62ccec3cadd6202110d782007275c420fc234bd8890acc7de20dd3c0a099cbe1256e068f302621a217a4ceab59cf155586c3d719272e8f2d46f2a82a24fc701f078f4bb112be25a4e8283d110ff74a659caa25e2edabcd512e4ecd42850a93efcffeb81e90d213ab76b65c4b5a637243f8b20bae3aee03967ab8d0263322c54e69815fe8a82e738bdaa3ed9aae3cc89099a2be6512c37a3113e91b31b5d9a1b7da47878be98334a377bf80dc1b8e44a9c06810a04c24e36f6b4b9b20a5dfe424c34aa85dea855146bb1ab3c2dbaaafcdc1afb53fc0262665b97c78875dda08a3b6ffa27af06aa6825e4cf18cf80a29c3c64cc13f4c810b4a86d95809658b71ff18c5f0427794dcf3bdbfc0d42fd94034fe8667b8d00fc34256ee483af49dffb5619ca19603217c0e7791d12a62eb5d66df59c049a96afddc264f76c4ac9650e2ed94966adc42759f831ad695be15add73af2d2f8247dea48e85789add33da3d85648f5a4c02d3d959c5f52e11784e2977df9270c84166f01cb581fdf1827b01bba6af330a3071f0b07121de9c74f74e985cdfa48ddf4f885a3a5d29325ede27985e498204c08cc2db7caa9d91fe1051d9c0a9abdab837ce689227e4f164ebe7170a85df161fa345dbe70af7df61d89450b2056518b3c8de00cda4533db709d475c6972c04b845b279061e50eadccec3c953a2698b64215968742c44ac0cc742dd6560e87f3097d260f42b69fb4e49d31b0a5e0ca2931ad0aec60aef4df067e6fa86017ca73d4d99cc67add486815e7fdb7449ef9395a6f0cfb9964aaa315e41a15b113f28af43f4ee992dc15bdc7b5653477785ff929a2a7655652c79ed81310a4272e80cf459ffb1f6a57fb22985ea0fca2217eae8daa1fa2701ff37be266080584885732a5b987a5990479af2e7c37de91831a5f323466feaf3c41e5376e7c79d07f0d060398e1ade0b6e18b70527f23aac686cc195afb7c850d2fe4b2d0d51b54282a8fbe2ef29ce56dd9b38891b7237b5797df6491af", 0x1000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x7, &(0x7f0000000680)=""/182, 0xb6}, 0x10062) [ 1247.922834][ T5103] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1248.172159][ T5103] usb 2-1: Using ep0 maxpacket: 8 [ 1248.347402][T17335] usb 6-1: USB disconnect, device number 15 [ 1248.374157][ T5103] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1248.384634][ T5103] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1248.395294][ T5103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.633158][ T5103] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.643617][ T5103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.652464][ T5103] usb 2-1: Product: syz [ 1248.656967][ T5103] usb 2-1: Manufacturer: syz [ 1248.661891][ T5103] usb 2-1: SerialNumber: syz 22:46:08 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002400)='/sys/block/loop0', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000023c0)=ANY=[], 0x28) 22:46:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000073900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="75c991b33ffb3702950faea4b9a6c50951a3c5ba9e548c2cbb80fb61a0c5f029b42dde3189fda6820ae1e7e8cf20db71c1298a751e0add948ad75fff2e734a8d608c2c50abca15afb8cab363e64e41c73ab78a422b515d96889820665a77df82b93136ce714b600c1c84ff4fe1f8ec53d4c388fce0962bb59685f4511f962eb028ff50199bdb125b278935bdeb4dda2aac377b34fa8bf64bc63a0ac75ab7a28e38278baa47a3e60aea667699f963b6f5154c534a7d81153875c3c4dcc788c047a5ab3272753de78db40678a664092569dd65aa84bdac0caab47297d49a2310652f9934cf7952c16e10a7d2b0f9a5ee854c97cdf73299263a067e5d75eb17e640a0ca3af1537a38d128fdb4285dcfaba771f9cda50128abf9ceb895acabdf91b51bf74c991f287334808ec75944ca869a23b1cfe8eb08df8a90ff62407ce277302221536b8f3646a4776443ce8d3cd42e3ae7048a68fd251cf2cc80719fb208db9a39438cd23e4b08cf8b624fa9c4c1bf20f48055ab6883f93527e2402cc875f168bdc952d1f56b2b157b04537c028cb199e92db8b5179d89d42592cb9bee73a6619cab3de218546b58685f41cc1bb8f287400e64a25bf8c219686b31294778065e9a73edc266aa2fdbca110c49b166bd648f95d1f3a71daf6639f33ca663dd0319c308ff4d32e6e36b1a43fcab6a46d1c7806e85ff17decdc634479d7fff559c3bd4c03ae3560e92dbb2e1e7096ed8af6924d48da7a57978709e349f2ad9a9e4402803104b6b2e668dd831d2987e590cdedf277029fcceffa4e67fc97566d47965d635c9c8ffc8d772228f636e18b2af87b0158cf84740283f18300ae2d2c449f7cb9a44869fffbb2ca0713a1765bb597f60f3e1e05e6b0689caec031599ee76ecff25095351eb8edb1c10b261083a371af332e75cae8af502757b33c6c790ed3ec639d982cbc655548788791addb5ad5debdfd78f3fafdd0478cfb9b9ac9e7123be0e80b00367144619b74d29169a4ccae6975384ee1c40b5cf1b30a378618fbcb4a930ac050344389cf7df8a808d893a95f8028b437dac1e75e19db34df97ff9522bb529e521c9343dcd400135f56be98e1e3dbbf98f8456a08ea86fcab67d5a9b964aca8f332e7fe94598a950428749eaacc0bd5715e2d925accbf6a8e389a512aea0c2ea6adea67696786f63ec211033cd6863ee3acf55cf987a7a5559537ac2a2680631186825f3418ed98d793542c5719c6d3199ce73c14c1c19a81ad751ccf9130a5492ec95502331cd9b341227bbe7101232dc7b8d3d5d8c94d8395c586e5ec21da25301594643086f9bf5cad54350a2d6a8e7b921d5f8282b23b950e7a178b116da477e6866c8797e7b6bbe65a313bae934fc9c3c285ae4169e07020a93396849ef1932bcb9239833302afb78ea6c5f484a8fd769cb6793cdfd26ef26e6d2da1bdfaed6157db7aeb96c4081bf08b7cd1021a73b32a06ef7887a3c53055c7ce1a465286a4f68add859d6871b0cef6c8af2e73f99687326ebfc86535c4a52e9f9f3a33a80fc1c2157363c7aaa091398aeb8a1b83112ee141578c40027f5d16db1be7281168236b6a1e95204c2774f4f4a0d80a9890759926c678371b95e45d5bc079b9826a6a494e59a73b4f9b6783c230fd85336d214199898a21499e95d85af10db0a4e9e1da1cca54788c00d6efa570a5dcb921a895025da33e4ec967087d642d663135a930f108ee77d38b1da83581081e0d048546ade136df158be8aad660cd4c2d8b94cdbbbec50d622f53d7a9517d3e41ca737ecea5fc31e69c1b2c3ef2a0f9fe35ff244827083ab84da06be611acabcb34fe536705a57dd633fce8968d17836ee55e9ee970d22c606399db001cfc0a6de3a6b995150bb6544cfb6201990f52c77365f52b06b8a108ef14254743c715059f5deb9d5a52fbc74fd34c9c193da6bec6fdf2f154b6d30e9b5140e29aa4ef7d7b710df266ba0cf5f5d0d9919da40ae29724df23cbcaa0abba40b0692131d7d714b536f8a8e7dfc5a0c6519ff0e7ab6faac698d89fb84c325ccb7c5e99d4baa601e36981c21fe9a0282b0d6018923c6f0865c182ab3536926b2080df408dba4d6d5a7af28b8a9bece05aaee8eada26d76206b863779477f1914a69bbf99e94f501616d8709325ad2e9054ff98386ad53e62ea3f5c85558ef3ac1155999712c8c1b8581b6fa529d4922552b7d43c6248241a175eb5ecc61643075388729dcd147217afce04361525d1997205faf0e9f262985d03cc817bb7de2e3b1668631fcd96429ef220ae92793775c41d6f54eb4766d6ad8c7341e6b17b7db501dae33b159d8cddd7b78f88c0364631f5b38ed3b8474064e838fcf3bbdc4fca978b0119da169c9838eec21006550d8e04fa364e9d798e6daba6c70928056da413d1a1c6acc9e8c07e064efcabb9f73a68845c1f612d97d5d8826e26c01151d1fae48133acce4a19c880ad240dc76c87c4158fa0014b7b698c4a9c6da2744742cdfe6600d9408b3a041fd98ee068779a55ab9aa438ed6eb7e37eb71ce6ba9c8aac0af603fdf0c7b21019906942256433e8976ffa262254c768a9572262856da9abc7561d33907984f67122de1ed4ceb4ba954660a6cebef26aba540c371b0e14081cced5059a9a8547638f9fe47891f12b417803032d89862063a45917543d3325383a109f964b0d1ee6ca1f49f04a061ed2521a296b877a75e5da568efad3f733c57335b1f3b2d9b639f461378a936fe427812e901076ef49a479d39ff8986203416b87a79358484351d6837d26393766a6ac0cb21ba917d6ca737ee561cd056312d354f7193d76fb44233e851e1febebd4242f5c1e1b3c55842ab8e0b2d2731ad8320d124d9eebf31ac898c7aed96041db791dfa85a918c300a39db4ad1f3d83f3f64504562407d3047d511f686a738c352dbdf4834ce0dcc36dfa90f42d7128f07214d1fbc904f0215315f1682f5b37586ac39354fc00bb6fb8a2f7327a6974547e95b0bce59762fee0023bc86f0ead4087a3136884dae1ccb81d93908ae68bc25340c5bb86a4f6c58d78ec3da7f508629a8234b9aea9c20aace0635044d278bba0678c401a557facfaff27286cd8f123af66974a50b5a537b4ab3f65c6a9d848474ec4d3ae680ff737f20b14bcb6d2572db2ed7e41e4bb853787fffadc3b114ae2c1aa3ff980ce665234b42c93c3b8f2e68b9b377e26aef737de1bd5e8b676ededff46f8b7542b1895310dee40d76d5126d087a0bb4a91bb23f09d3553ed32e3a125e6e246271e12fc4e56abe888c2df1258729b2cfd89422a3e63713a65570d68d98b3e9c146089e87bc2fd7cf186b790745f4c65554e8d8ff58a38aafd5a9e5943041e8e011f95fe990a6fccd0150ff8b6831f74c816191bc6bcd8531c18a3448494db1a95f47236fa42f7c3727dfbbd79621a83ef4e4de8f0fd59e653bc5e7fcd13ae3da41be5e8cbb43105fe68be1b47354b338510d4b8321a363d74f5bff9b40032cf981834d79823d157f2eb514b4a7c4d5acfccb4514e474848e2ee0c68cc48388b5fcb85a481774901fa0d63640c2d32b96e66a8bde12e8723c6882c27987f4d10345fa3596f69ae44cddef71b7e10bce700f9a4eb3429a6514419d8d8ce64dfe8fe9b673ea117d66cba94def0544090f91df29290e2af24b14b9b95340971b0112741ac81b05c825c25397c3dc4f8a77bf2998b42c92e957096c9b9c5a2c1fe375970162556a46499ecd9d3bb53c9ad375201c233b3472aac50c40b54fc0da72647cd936b3a2f274bdf5245603808e0bbf658616cc7ef6f68eb63ef0f8e752c1e7410a163d9582db51eab272213210faef913d387e0fd2f9b7952e754cc031be29584f1d6f4fa8a44eab57d630d1c850cb164d1516a29aeb7e3b43e91110502f251955a2c3e8bee3d5044898f9c86f7e24e69776508d1bb1c79b6aecaf14d4788391a60a8e5099a6014e93793bfe2cf02b56b144e99d530581d152546e051bf25f7f83097f748e65c249b478bc54ca5c3a383d3ee3d9cf3117d0476a09a933910c88444c6450e42e76a3d8121cf41efd6c01f798b9c854539d213277b83bdb0fba60a2ebd4fb86e6cdee7f0894c437c49c8149407c28cf851cccf7bf8a23610d55664fe108a5e2fb36f30d764c79839a4b08af8d1cfab698ca3edba1fec77a5f51c8041dd2fc46b61efa3f3636fdada826d01a097ed12032b10bc046a2632b011cd8f126d924fca00b0884b9dd8ec77e3f9af9fb892cc4ea65d8efa01f7e8371b00239bcb9461ed2134de71b8f42b89f1419f7d4a2a987141faafc456a24ac39bfe3351431a39d7ba8438d2f5003c80cd980dd393c21b460f56d4e3ec93f1b1671bea43ad726a2c22436e616fc22eab8ef1ac4a7ede3f91c84a310313d4fed7048e29285465869dee1fe16882cdcd4da876714125f4cc310870976519a01c5124366379e8f54bca1217ca2fa68b3fa5b1f54bf662e6f509b386b7c0beed2b2b7be42f52351f99f8b2e5aabfcf3932302dc7e8f5e0c0ae107a4e0464e1d578a961e65d0ba82d52078fc61f2a7f1894f2978fa8c30a0bc435012aa86896256e1133f28427f63c52abef04e3785833d36903128fc2c5b4bcfc1ac4bcdd47aa7f12bfb08c1bd9e7ba182df8a3ef330ad7a42e74629062bb04cad88424eeff2d2049fe02e20257a3574e90ed21d2d878b2f8bdafd1ba32404ad5500d6b8c9ef91b1f155189e4c88e4d6031c5d337f00919fd62ccec3cadd6202110d782007275c420fc234bd8890acc7de20dd3c0a099cbe1256e068f302621a217a4ceab59cf155586c3d719272e8f2d46f2a82a24fc701f078f4bb112be25a4e8283d110ff74a659caa25e2edabcd512e4ecd42850a93efcffeb81e90d213ab76b65c4b5a637243f8b20bae3aee03967ab8d0263322c54e69815fe8a82e738bdaa3ed9aae3cc89099a2be6512c37a3113e91b31b5d9a1b7da47878be98334a377bf80dc1b8e44a9c06810a04c24e36f6b4b9b20a5dfe424c34aa85dea855146bb1ab3c2dbaaafcdc1afb53fc0262665b97c78875dda08a3b6ffa27af06aa6825e4cf18cf80a29c3c64cc13f4c810b4a86d95809658b71ff18c5f0427794dcf3bdbfc0d42fd94034fe8667b8d00fc34256ee483af49dffb5619ca19603217c0e7791d12a62eb5d66df59c049a96afddc264f76c4ac9650e2ed94966adc42759f831ad695be15add73af2d2f8247dea48e85789add33da3d85648f5a4c02d3d959c5f52e11784e2977df9270c84166f01cb581fdf1827b01bba6af330a3071f0b07121de9c74f74e985cdfa48ddf4f885a3a5d29325ede27985e498204c08cc2db7caa9d91fe1051d9c0a9abdab837ce689227e4f164ebe7170a85df161fa345dbe70af7df61d89450b2056518b3c8de00cda4533db709d475c6972c04b845b279061e50eadccec3c953a2698b64215968742c44ac0cc742dd6560e87f3097d260f42b69fb4e49d31b0a5e0ca2931ad0aec60aef4df067e6fa86017ca73d4d99cc67add486815e7fdb7449ef9395a6f0cfb9964aaa315e41a15b113f28af43f4ee992dc15bdc7b5653477785ff929a2a7655652c79ed81310a4272e80cf459ffb1f6a57fb22985ea0fca2217eae8daa1fa2701ff37be266080584885732a5b987a5990479af2e7c37de91831a5f323466feaf3c41e5376e7c79d07f0d060398e1ade0b6e18b70527f23aac686cc195afb7c850d2fe4b2d0d51b54282a8fbe2ef29ce56dd9b38891b7237b5797df6491af", 0x1000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x7, &(0x7f0000000680)=""/182, 0xb6}, 0x10062) 22:46:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0x0, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1249.023015][ T5103] usb 2-1: 0:2 : does not exist 22:46:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x1000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x7, &(0x7f0000000680)=""/182, 0xb6}, 0x10062) [ 1249.114733][ T5103] usb 2-1: USB disconnect, device number 30 22:46:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:09 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x2000000}, 0x0) [ 1254.709398][T21949] udevd[21949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 22:46:15 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) 22:46:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="75c991b33ffb3702950faea4b9a6c50951a3c5ba9e548c2cbb80fb61a0c5f029b42dde3189fda6820ae1e7e8cf20db71c1298a751e0add948ad75fff2e734a8d608c2c50abca15afb8cab363e64e41c73ab78a422b515d96889820665a77df82b93136ce714b600c1c84ff4fe1f8ec53d4c388fce0962bb59685f4511f962eb028ff50199bdb125b278935bdeb4dda2aac377b34fa8bf64bc63a0ac75ab7a28e38278baa47a3e60aea667699f963b6f5154c534a7d81153875c3c4dcc788c047a5ab3272753de78db40678a664092569dd65aa84bdac0caab47297d49a2310652f9934cf7952c16e10a7d2b0f9a5ee854c97cdf73299263a067e5d75eb17e640a0ca3af1537a38d128fdb4285dcfaba771f9cda50128abf9ceb895acabdf91b51bf74c991f287334808ec75944ca869a23b1cfe8eb08df8a90ff62407ce277302221536b8f3646a4776443ce8d3cd42e3ae7048a68fd251cf2cc80719fb208db9a39438cd23e4b08cf8b624fa9c4c1bf20f48055ab6883f93527e2402cc875f168bdc952d1f56b2b157b04537c028cb199e92db8b5179d89d42592cb9bee73a6619cab3de218546b58685f41cc1bb8f287400e64a25bf8c219686b31294778065e9a73edc266aa2fdbca110c49b166bd648f95d1f3a71daf6639f33ca663dd0319c308ff4d32e6e36b1a43fcab6a46d1c7806e85ff17decdc634479d7fff559c3bd4c03ae3560e92dbb2e1e7096ed8af6924d48da7a57978709e349f2ad9a9e4402803104b6b2e668dd831d2987e590cdedf277029fcceffa4e67fc97566d47965d635c9c8ffc8d772228f636e18b2af87b0158cf84740283f18300ae2d2c449f7cb9a44869fffbb2ca0713a1765bb597f60f3e1e05e6b0689caec031599ee76ecff25095351eb8edb1c10b261083a371af332e75cae8af502757b33c6c790ed3ec639d982cbc655548788791addb5ad5debdfd78f3fafdd0478cfb9b9ac9e7123be0e80b00367144619b74d29169a4ccae6975384ee1c40b5cf1b30a378618fbcb4a930ac050344389cf7df8a808d893a95f8028b437dac1e75e19db34df97ff9522bb529e521c9343dcd400135f56be98e1e3dbbf98f8456a08ea86fcab67d5a9b964aca8f332e7fe94598a950428749eaacc0bd5715e2d925accbf6a8e389a512aea0c2ea6adea67696786f63ec211033cd6863ee3acf55cf987a7a5559537ac2a2680631186825f3418ed98d793542c5719c6d3199ce73c14c1c19a81ad751ccf9130a5492ec95502331cd9b341227bbe7101232dc7b8d3d5d8c94d8395c586e5ec21da25301594643086f9bf5cad54350a2d6a8e7b921d5f8282b23b950e7a178b116da477e6866c8797e7b6bbe65a313bae934fc9c3c285ae4169e07020a93396849ef1932bcb9239833302afb78ea6c5f484a8fd769cb6793cdfd26ef26e6d2da1bdfaed6157db7aeb96c4081bf08b7cd1021a73b32a06ef7887a3c53055c7ce1a465286a4f68add859d6871b0cef6c8af2e73f99687326ebfc86535c4a52e9f9f3a33a80fc1c2157363c7aaa091398aeb8a1b83112ee141578c40027f5d16db1be7281168236b6a1e95204c2774f4f4a0d80a9890759926c678371b95e45d5bc079b9826a6a494e59a73b4f9b6783c230fd85336d214199898a21499e95d85af10db0a4e9e1da1cca54788c00d6efa570a5dcb921a895025da33e4ec967087d642d663135a930f108ee77d38b1da83581081e0d048546ade136df158be8aad660cd4c2d8b94cdbbbec50d622f53d7a9517d3e41ca737ecea5fc31e69c1b2c3ef2a0f9fe35ff244827083ab84da06be611acabcb34fe536705a57dd633fce8968d17836ee55e9ee970d22c606399db001cfc0a6de3a6b995150bb6544cfb6201990f52c77365f52b06b8a108ef14254743c715059f5deb9d5a52fbc74fd34c9c193da6bec6fdf2f154b6d30e9b5140e29aa4ef7d7b710df266ba0cf5f5d0d9919da40ae29724df23cbcaa0abba40b0692131d7d714b536f8a8e7dfc5a0c6519ff0e7ab6faac698d89fb84c325ccb7c5e99d4baa601e36981c21fe9a0282b0d6018923c6f0865c182ab3536926b2080df408dba4d6d5a7af28b8a9bece05aaee8eada26d76206b863779477f1914a69bbf99e94f501616d8709325ad2e9054ff98386ad53e62ea3f5c85558ef3ac1155999712c8c1b8581b6fa529d4922552b7d43c6248241a175eb5ecc61643075388729dcd147217afce04361525d1997205faf0e9f262985d03cc817bb7de2e3b1668631fcd96429ef220ae92793775c41d6f54eb4766d6ad8c7341e6b17b7db501dae33b159d8cddd7b78f88c0364631f5b38ed3b8474064e838fcf3bbdc4fca978b0119da169c9838eec21006550d8e04fa364e9d798e6daba6c70928056da413d1a1c6acc9e8c07e064efcabb9f73a68845c1f612d97d5d8826e26c01151d1fae48133acce4a19c880ad240dc76c87c4158fa0014b7b698c4a9c6da2744742cdfe6600d9408b3a041fd98ee068779a55ab9aa438ed6eb7e37eb71ce6ba9c8aac0af603fdf0c7b21019906942256433e8976ffa262254c768a9572262856da9abc7561d33907984f67122de1ed4ceb4ba954660a6cebef26aba540c371b0e14081cced5059a9a8547638f9fe47891f12b417803032d89862063a45917543d3325383a109f964b0d1ee6ca1f49f04a061ed2521a296b877a75e5da568efad3f733c57335b1f3b2d9b639f461378a936fe427812e901076ef49a479d39ff8986203416b87a79358484351d6837d26393766a6ac0cb21ba917d6ca737ee561cd056312d354f7193d76fb44233e851e1febebd4242f5c1e1b3c55842ab8e0b2d2731ad8320d124d9eebf31ac898c7aed96041db791dfa85a918c300a39db4ad1f3d83f3f64504562407d3047d511f686a738c352dbdf4834ce0dcc36dfa90f42d7128f07214d1fbc904f0215315f1682f5b37586ac39354fc00bb6fb8a2f7327a6974547e95b0bce59762fee0023bc86f0ead4087a3136884dae1ccb81d93908ae68bc25340c5bb86a4f6c58d78ec3da7f508629a8234b9aea9c20aace0635044d278bba0678c401a557facfaff27286cd8f123af66974a50b5a537b4ab3f65c6a9d848474ec4d3ae680ff737f20b14bcb6d2572db2ed7e41e4bb853787fffadc3b114ae2c1aa3ff980ce665234b42c93c3b8f2e68b9b377e26aef737de1bd5e8b676ededff46f8b7542b1895310dee40d76d5126d087a0bb4a91bb23f09d3553ed32e3a125e6e246271e12fc4e56abe888c2df1258729b2cfd89422a3e63713a65570d68d98b3e9c146089e87bc2fd7cf186b790745f4c65554e8d8ff58a38aafd5a9e5943041e8e011f95fe990a6fccd0150ff8b6831f74c816191bc6bcd8531c18a3448494db1a95f47236fa42f7c3727dfbbd79621a83ef4e4de8f0fd59e653bc5e7fcd13ae3da41be5e8cbb43105fe68be1b47354b338510d4b8321a363d74f5bff9b40032cf981834d79823d157f2eb514b4a7c4d5acfccb4514e474848e2ee0c68cc48388b5fcb85a481774901fa0d63640c2d32b96e66a8bde12e8723c6882c27987f4d10345fa3596f69ae44cddef71b7e10bce700f9a4eb3429a6514419d8d8ce64dfe8fe9b673ea117d66cba94def0544090f91df29290e2af24b14b9b95340971b0112741ac81b05c825c25397c3dc4f8a77bf2998b42c92e957096c9b9c5a2c1fe375970162556a46499ecd9d3bb53c9ad375201c233b3472aac50c40b54fc0da72647cd936b3a2f274bdf5245603808e0bbf658616cc7ef6f68eb63ef0f8e752c1e7410a163d9582db51eab272213210faef913d387e0fd2f9b7952e754cc031be29584f1d6f4fa8a44eab57d630d1c850cb164d1516a29aeb7e3b43e91110502f251955a2c3e8bee3d5044898f9c86f7e24e69776508d1bb1c79b6aecaf14d4788391a60a8e5099a6014e93793bfe2cf02b56b144e99d530581d152546e051bf25f7f83097f748e65c249b478bc54ca5c3a383d3ee3d9cf3117d0476a09a933910c88444c6450e42e76a3d8121cf41efd6c01f798b9c854539d213277b83bdb0fba60a2ebd4fb86e6cdee7f0894c437c49c8149407c28cf851cccf7bf8a23610d55664fe108a5e2fb36f30d764c79839a4b08af8d1cfab698ca3edba1fec77a5f51c8041dd2fc46b61efa3f3636fdada826d01a097ed12032b10bc046a2632b011cd8f126d924fca00b0884b9dd8ec77e3f9af9fb892cc4ea65d8efa01f7e8371b00239bcb9461ed2134de71b8f42b89f1419f7d4a2a987141faafc456a24ac39bfe3351431a39d7ba8438d2f5003c80cd980dd393c21b460f56d4e3ec93f1b1671bea43ad726a2c22436e616fc22eab8ef1ac4a7ede3f91c84a310313d4fed7048e29285465869dee1fe16882cdcd4da876714125f4cc310870976519a01c5124366379e8f54bca1217ca2fa68b3fa5b1f54bf662e6f509b386b7c0beed2b2b7be42f52351f99f8b2e5aabfcf3932302dc7e8f5e0c0ae107a4e0464e1d578a961e65d0ba82d52078fc61f2a7f1894f2978fa8c30a0bc435012aa86896256e1133f28427f63c52abef04e3785833d36903128fc2c5b4bcfc1ac4bcdd47aa7f12bfb08c1bd9e7ba182df8a3ef330ad7a42e74629062bb04cad88424eeff2d2049fe02e20257a3574e90ed21d2d878b2f8bdafd1ba32404ad5500d6b8c9ef91b1f155189e4c88e4d6031c5d337f00919fd62ccec3cadd6202110d782007275c420fc234bd8890acc7de20dd3c0a099cbe1256e068f302621a217a4ceab59cf155586c3d719272e8f2d46f2a82a24fc701f078f4bb112be25a4e8283d110ff74a659caa25e2edabcd512e4ecd42850a93efcffeb81e90d213ab76b65c4b5a637243f8b20bae3aee03967ab8d0263322c54e69815fe8a82e738bdaa3ed9aae3cc89099a2be6512c37a3113e91b31b5d9a1b7da47878be98334a377bf80dc1b8e44a9c06810a04c24e36f6b4b9b20a5dfe424c34aa85dea855146bb1ab3c2dbaaafcdc1afb53fc0262665b97c78875dda08a3b6ffa27af06aa6825e4cf18cf80a29c3c64cc13f4c810b4a86d95809658b71ff18c5f0427794dcf3bdbfc0d42fd94034fe8667b8d00fc34256ee483af49dffb5619ca19603217c0e7791d12a62eb5d66df59c049a96afddc264f76c4ac9650e2ed94966adc42759f831ad695be15add73af2d2f8247dea48e85789add33da3d85648f5a4c02d3d959c5f52e11784e2977df9270c84166f01cb581fdf1827b01bba6af330a3071f0b07121de9c74f74e985cdfa48ddf4f885a3a5d29325ede27985e498204c08cc2db7caa9d91fe1051d9c0a9abdab837ce689227e4f164ebe7170a85df161fa345dbe70af7df61d89450b2056518b3c8de00cda4533db709d475c6972c04b845b279061e50eadccec3c953a2698b64215968742c44ac0cc742dd6560e87f3097d260f42b69fb4e49d31b0a5e0ca2931ad0aec60aef4df067e6fa86017ca73d4d99cc67add486815e7fdb7449ef9395a6f0cfb9964aaa315e41a15b113f28af43f4ee992dc15bdc7b5653477785ff929a2a7655652c79ed81310a4272e80cf459ffb1f6a57fb22985ea0fca2217eae8daa1fa2701ff37be266080584885732a5b987a5990479af2e7c37de91831a5f323466feaf3c41e5376e7c79d07f0d060398e1ade0b6e18b70527f23aac686cc195afb7c850d2fe4b2d0d51b54282a8fbe2ef29ce56dd9b38891b7237b5797df6491af", 0x1000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x7, &(0x7f0000000680)=""/182, 0xb6}, 0x10062) 22:46:15 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f7}, 0x18}, 0x300}, 0x0) 22:46:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000093900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:15 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3ed}, 0x18}, 0x300}, 0x0) 22:46:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0x0, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 22:46:16 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f3}, 0x18}, 0x300}, 0x0) 22:46:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000f3900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:16 executing program 4: syz_usb_connect$uac1(0x0, 0xff, 0x0, 0x0) 22:46:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0x0, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:16 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0x20000005, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x18}}, 0x0) 22:46:17 executing program 3: io_uring_setup(0x6d69, &(0x7f0000000000)) syz_io_uring_setup(0x35d9, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 22:46:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000603900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:17 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 22:46:17 executing program 5: creat(&(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 22:46:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:18 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2$9p(&(0x7f0000000240), 0x0) 22:46:18 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 22:46:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000002c00)='scsi_eh_wakeup\x00'}, 0x10) [ 1258.740358][ T24] audit: type=1326 audit(1676673978.794:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c51c8c0f9 code=0x7ffc0000 22:46:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:19 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x42, &(0x7f0000000480)=@string={0x42, 0x3, "23ae39164ba40c193698a86c717519fbebe187dd72512708497cbd15e5c4060185a0cc35cac42792c6d62685706f2f143e084d104743fec153bfe10c76f655da"}}]}) 22:46:19 executing program 5: syz_clone(0xb0200000, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0x0) 22:46:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1259.742562][ T5103] usb 4-1: new high-speed USB device number 22 using dummy_hcd 22:46:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1259.856649][T21949] udevd[21949]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1260.123117][ T5103] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1260.132894][ T5103] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1260.148417][ T5103] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1260.582524][ T5103] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1260.592445][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.600722][ T5103] usb 4-1: Product: syz [ 1260.605367][ T5103] usb 4-1: Manufacturer: 긣ᘹꑋᤌ頶沨畱﬙兲ࠧ籉ᖽ쓥Ćꂅ㗌쓊鈧훆蔦潰ᐯ࠾၍䍇쇾뽓ೡ [ 1260.617869][ T5103] usb 4-1: SerialNumber: syz [ 1261.163118][ T5103] usb 4-1: 0:2 : does not exist [ 1261.392924][ T5103] usb 4-1: USB disconnect, device number 22 [ 1261.629386][T21949] udevd[21949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 22:46:22 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 22:46:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x700, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd6000000e00002c00632f77", 0x0, 0x100, 0x2000000}, 0x28) 22:46:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10}, 0x48) 22:46:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x0, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:22 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x6, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) [ 1262.749022][T21949] udevd[21949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 22:46:22 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:22 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x7380a000, 0x0, 0x0, 0x0, 0x0, 0x0) 22:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:23 executing program 1: socketpair(0x29, 0x0, 0x0, &(0x7f00000000c0)) 22:46:23 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:23 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000e00)=r1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0), 0x8) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000e00)=r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={&(0x7f0000002580)="a8482d2222d107a5e503eed9b3182776888bef56b6794d330d6495cb853032e7dc61134a01074f8287c10f2353969b0843fabe69e54dec7f4e190a64697a", &(0x7f00000025c0)=""/5, &(0x7f0000002600)="a21b0f49c4457c99cc2505333a67bfb2b7e8406c9692f023a94c678fa60db6b979b3a8bd81357ec257bdda7f67c06d93eb06fd27d7c256192a401c0594d86ee91aa161d851873abaa4303bdb92ade1a5d015f0a84e05f85b8d7c192e195721209684e43380210a0512ee24dfc2c3fc60fda4afdfd4d56487523978bb07e3db8068a91af209436c300cf043fa7d15929ecd95e49cbf5f562402667164d2a11ab07f202b9e636ca798ab6a237c8223c5613bb96a44f62bb7f171bdba8071141dcb60137be5d8168ed43f1230b364daf1d4fb7f97dcdce09f67e5d5f4c9df23f8c1a929c9ef0b1e19eacadd9cce6e4b11bb27", &(0x7f0000002700)="382dab98b3a94ca047a397b661fb159218ce6567e1190a55ec2511d2ed07de171791ae90e8fddc3b6faecc962dcf8ea0bd86c878c1385224fccc4cd2123ee9e45942c0c8436dc9865e9443afa7573926efac8832cad9ef3ba9e75ed14f8a221a01b31b9219bae9ca08b18faae11164098ccd4fae28936e193fdd8850ffab7ae2cd11531346db56ee92666da133cb33ddd077250ca9d050d43d1803b898c75bd21ea7aa9d7f943dab0951536314de94e1451f3e3932fa7522095951b4bc8257bf5af9a5dd2a4bac59bd6faabf46e29721fc", 0x7, r2, 0x4}, 0x38) recvmsg(r0, &(0x7f0000002540)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/2, 0x2}, {&(0x7f0000001240)=""/180, 0xb4}, {&(0x7f0000001300)=""/149, 0x95}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/142, 0x8e}], 0x7, &(0x7f0000002500)=""/24, 0x18}, 0x10240) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0), 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000e00)=r5) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000002840)=0x100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 22:46:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xf}, 0x48) 22:46:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=@raw=[@exit, @exit, @alu, @jmp={0x5, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x0, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:24 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 22:46:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd079c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be266e31a8021e00b00104e0801d4de36e5fdc6c42a7b3f092f6906a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003845404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d737acb2f206fc538450a68454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a231c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab7fa34ab0a7e7e497065e5e282e8852a265d528075214af000000000070d42182d8f3a347d48289865f75331d888c72df1da4b290582f94064227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504801e747715550f843b66b1a8c7b36194ba901040000c9b18d8c1b9e1a736825c91b4dff00003459c117f78aff01000000000000ebfd72193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f4f8c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce2161342f4c722f8491805c2b0c2ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66ff4984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126cab060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e5e9fb26fb6ef4615f4092de54c1ddbd9d25916d642c66383bd2426ba6f519f4622e1224153463ea80248a45a95a189958f6b82ee2ccaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e28d655c108728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc110300000000000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee599ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c35ceff855bd2dec3452c7c38f5dbf1f000000020020000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a976ba3cd207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b45a88522e3dcbb88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a7c5c2029b400c205b2ee8d859673135d26e10ac6f2669d79378ea946dd0f862989e12df6c21f0c7369f4d349a411d8f25930bea684dea3bf2f3f31818251004c589b3ebef9030e685f836ef6d1c44860e3d7e9a84900e378f33808e3bb3ecb20862a8eb014cb1d9b57a18fd562b1d6fe3c373891bdb287a27cf26d59a04b19078974644183500caa5b476e3a2f977109046ae7822a951a0b536678ff098a1ddc9afa77f3715c1a230b1f81fa02bf52e82296ff92c4516bcf255d1a74b5099d022dcb49166fd1d2f489266a6cf2b5e0c8c25dc3b9d670b7681b0a63bb1acf094dae0ee59f852c6191f5b1f874ebfe6cb13874c82d825e26997e8d01279ae1dd043a400331079c0a9445e6a53eac2de77dd01267faf57410a9b8cbf8fd0523b89d1262ef980f068454de27fb7ea75a727cb7339072d10228d0a3c9dfcf08c194952f4d45"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x700, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd6000000e00002c00632f77", 0x0, 0x100, 0x2000000}, 0x28) 22:46:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x1, &(0x7f00000002c0)=@raw=[@kfunc], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:24 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0xa, 0x0, 0x0, 0x0, 0x841}, 0x48) 22:46:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x202802, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 22:46:24 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="91", 0x1}], 0x1}, 0x83) 22:46:25 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) 22:46:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x0, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd079c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be266e31a8021e00b00104e0801d4de36e5fdc6c42a7b3f092f6906a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003845404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d737acb2f206fc538450a68454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a231c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab7fa34ab0a7e7e497065e5e282e8852a265d528075214af000000000070d42182d8f3a347d48289865f75331d888c72df1da4b290582f94064227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504801e747715550f843b66b1a8c7b36194ba901040000c9b18d8c1b9e1a736825c91b4dff00003459c117f78aff01000000000000ebfd72193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f4f8c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce2161342f4c722f8491805c2b0c2ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66ff4984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126cab060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e5e9fb26fb6ef4615f4092de54c1ddbd9d25916d642c66383bd2426ba6f519f4622e1224153463ea80248a45a95a189958f6b82ee2ccaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e28d655c108728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc110300000000000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee599ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c35ceff855bd2dec3452c7c38f5dbf1f000000020020000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a976ba3cd207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b45a88522e3dcbb88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a7c5c2029b400c205b2ee8d859673135d26e10ac6f2669d79378ea946dd0f862989e12df6c21f0c7369f4d349a411d8f25930bea684dea3bf2f3f31818251004c589b3ebef9030e685f836ef6d1c44860e3d7e9a84900e378f33808e3bb3ecb20862a8eb014cb1d9b57a18fd562b1d6fe3c373891bdb287a27cf26d59a04b19078974644183500caa5b476e3a2f977109046ae7822a951a0b536678ff098a1ddc9afa77f3715c1a230b1f81fa02bf52e82296ff92c4516bcf255d1a74b5099d022dcb49166fd1d2f489266a6cf2b5e0c8c25dc3b9d670b7681b0a63bb1acf094dae0ee59f852c6191f5b1f874ebfe6cb13874c82d825e26997e8d01279ae1dd043a400331079c0a9445e6a53eac2de77dd01267faf57410a9b8cbf8fd0523b89d1262ef980f068454de27fb7ea75a727cb7339072d10228d0a3c9dfcf08c194952f4d45"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x700, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd6000000e00002b00632f77", 0x0, 0x100, 0x2000000}, 0x28) 22:46:25 executing program 3: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x5, &(0x7f00000000c0)={@map=0x1}, 0x14) 22:46:25 executing program 1: bpf$BPF_PROG_ATTACH(0x7, &(0x7f00000000c0)={@map=0x1}, 0x14) 22:46:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) 22:46:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:25 executing program 1: syz_clone(0x14801000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 22:46:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x700, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd6000000e00000600632f77", 0x0, 0x100, 0x2000000}, 0x28) 22:46:26 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 22:46:26 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_fd]}, &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:26 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001380)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) 22:46:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:27 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:27 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x29}}, &(0x7f0000000400)='GPL\x00', 0x3, 0xba, &(0x7f0000000440)=""/186, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 22:46:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @fwd]}}, &(0x7f0000000100)=""/148, 0x32, 0x94, 0x1}, 0x20) 22:46:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:27 executing program 3: bpf$BPF_PROG_ATTACH(0x1e, &(0x7f00000000c0)={@map=0x1}, 0x14) 22:46:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:27 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1267.620869][ T1188] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.627752][ T1188] ieee802154 phy1 wpan1: encryption failed: -22 22:46:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001840)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x4, 0x86, 0x98, 0x2, 0x3, 0x9, 0xe1, 0x40, 0xe7, 0x1, 0xbfea, 0x38, 0x1, 0x5eb, 0x100, 0x8a5}, [{0x5, 0x6, 0x1, 0xffffffffffffff6f, 0x80000001, 0x8, 0x8000000000000000, 0x5}], "5a25efe865cf4cd8ac0cfe4dbd712d30a917b296b1b698f8ce11631d0a92a0026565341347cae714b2ddf7d839807108be83284c562f7eabd4c117eca7024845cb8b9662a87bbf32c18d381a520b8116c096b232b877aabbc032d0e60df6d749a4ccbcbba3afa0fba553cea0db28ff86cf452980d798309ce14206e64cc3bced8aa159d89e1dc4713fb42f35bbb4b14af6f11389cfc2c7a362d5f2ca47f8d411894b5b1844bc65e6d91135357170680842847b61886fdef98b65cc55a2811fe75c9003cf43c8c06893b0fdd49cfd4d5ee8760ecd578502473747d706e91fb0fcca", ['\x00']}, 0x259) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r10, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r6, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, r11}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r8}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r10, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ac0)={0x401, [{r138, r62}, {0x0, r339}, {r250, r206}, {r42, r11}, {r324, r30}, {r7, r246}, {r145, r189}, {r349, r215}, {r99}, {r185, r17}, {r371, r303}, {r168, r122}, {r40, r267}, {r302, r222}, {r230, r1}, {r148, r296}, {r331, r179}, {r312, r13}, {r280, r286}, {r252, r123}, {0x0, r336}, {r225, r319}, {r4, r369}, {r260, r170}, {r31}, {r308, r213}, {r48, r17}, {r204, r296}, {r137, r79}, {r282, r210}, {r326, r28}, {r136, r120}, {r22}, {r256, r68}, {r172}, {0x0, r376}, {r223, r60}, {r361, r251}, {0x0, r347}, {r154, r222}, {r288, r8}, {r335, r341}, {r357, r206}, {r143, r255}, {r20}, {r26, r372}, {r338, r112}, {0x0, r17}, {r304, r189}, {r236, r298}, {r211, r231}, {r185, r332}, {r115, r367}, {r240, r299}, {r58, r317}, {r69, r294}, {r266, r261}, {r180, r81}, {r173, r157}, {r207, r224}, {r169, r337}, {r139, r155}, {r225, r23}, {r128, r334}, {r131}, {r258, r118}, {r156, r372}, {r131, r219}, {0x0, r15}, {r217, r290}, {r154, r38}, {r94, r376}, {0x0, r163}, {r108, r233}, {0x0, r301}, {0x0, r97}, {0x0, r360}, {r371, r286}, {r75, r213}, {r282, r27}, {0x0, r68}, {0x0, r116}, {r26, r345}, {r205, r85}, {r42, r321}, {0x0, r13}, {r349}, {r271, r53}, {r310, r369}, {r293, r27}, {r245, r132}, {r375, r265}, {r4, r215}, {r227, r231}, {r124, r90}, {r14, r144}, {r353, r104}, {r160, r272}, {r338, r356}, {r346, r118}, {r235}, {0x0, r38}, {r363, r116}, {r282}, {0x0, r277}, {r148, r86}, {r359, r127}, {r273, r352}, {0x0, r88}, {r164, r241}, {r40, r253}, {r211, r347}, {r141, r381}, {r72, r183}, {r254, r130}, {r77, r323}, {r9, r231}, {r29, r151}, {r196, r116}, {r318, r92}, {0x0, r315}, {r242}, {r314, r226}, {r78, r21}, {r240}, {r262, r113}, {r172, r25}, {r61, r97}, {r96, r332}, {0x0, r13}, {r273, r362}, {r289}, {r223, r107}, {r373, r113}, {r306, r219}, {r285, r299}, {r325}, {r342, r83}, {r22, r210}, {r52, r47}, {r232, r123}, {r190}, {r275, r170}, {r225, r208}, {r326, r1}, {r346}, {r18, r28}, {r377, r319}, {r229, r165}, {0x0, r85}, {r37, r1}, {r377, r79}, {0x0, r210}, {r18, r296}, {r175}, {r108, r199}, {r121, r35}, {r143, r159}, {r217, r292}, {r121, r247}, {r82, r177}, {r288, r5}, {r33, r132}, {r271, r274}, {r70, r43}, {r178, r255}, {r316, r165}, {r18}, {r235, r360}, {0x0, r238}, {}, {r4, r199}, {r186, r76}, {r134}, {r36, r199}, {0x0, r140}, {r349, r109}, {r98, r263}, {r158, r281}, {r365}, {r22, r81}, {r12, r277}, {r136, r59}, {r124, r53}, {0x0, r177}, {r4}, {0x0, r255}, {r145, r66}, {r380}, {r207, r255}, {0x0, r278}, {r229, r27}, {r275, r183}, {r311, r257}, {r56, r19}, {r87, r197}, {r235}, {r344, r46}, {r129}, {r182, r270}, {r34, r296}, {r242}, {0x0, r350}, {r158, r297}, {r378, r267}, {0x0, r67}, {r254, r237}, {r279, r43}, {r322, r286}, {r351, r287}, {0x0, r329}, {r304, r234}, {r275, r41}, {r266, r102}, {0x0, r161}, {r363, r222}, {r357, r177}, {r365, r294}, {r172, r244}, {r187, r25}, {0x0, r278}, {r316, r327}, {r65, r167}, {r185, r301}, {r26, r13}, {r29, r202}, {r63, r305}, {r133, r181}, {r335, r151}, {r308, r49}, {r84, r214}, {r33, r352}, {r184, r39}, {r106, r193}, {r190}, {r24, r284}, {r34, r295}, {r186, r197}, {r150, r290}, {r328, r313}, {r236, r68}, {r103, r364}, {r110, r71}, {r217, r44}, {r40, r51}, {r264}, {}, {r355, r55}, {r126, r23}, {r3, r97}, {r314, r135}, {r160}, {r348, r57}, {r266, r203}, {r229, r263}], 0x1f, "e2a8d531110d99"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r384 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r384, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r384, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r389}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r387}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r390}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r388}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r389, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r530, r522}, {r518}, {0x0, r454}, {r435, r490}, {}, {r461}, {0x0, r474}, {r400}, {r476}, {}, {}, {}, {r444, r399}, {r535, r534}, {}, {}, {0x0, r545}, {}, {r398}, {0x0, r526}, {r529}, {r458}, {}, {r419}, {r448}, {0x0, r504}, {}, {0x0, r394}, {}, {}, {r512, r531}, {r556}, {}, {r409}, {}, {r544}, {}, {0x0, r414}, {0x0, r486}, {r558, r488}, {r424, r540}, {}, {r392}, {r482}, {}, {}, {0x0, r561}, {0x0, r507}, {}, {}, {r385, r425}, {0x0, r432}, {r386}, {}, {r463, r502}, {r555, r472}, {}, {r523, r507}, {0x0, r405}, {r468, r383}, {}, {r514}, {r478}, {r464}, {}, {}, {}, {}, {}, {0x0, r563}, {}, {0x0, r428}, {}, {}, {r551}, {0x0, r453}, {r465, r453}, {}, {}, {}, {}, {}, {r431, r415}, {}, {}, {0x0, r536}, {r412}, {0x0, r457}, {}, {}, {r538}, {r412}, {}, {r391, r406}, {}, {r430}, {0x0, r438}, {r530, r521}, {r461}, {r424, r549}, {r517, r502}, {r557, r477}, {r508, r528}, {0x0, r467}, {}, {r489}, {0x0, r454}, {0x0, r440}, {r548, r516}, {r416}, {0x0, r543}, {r506}, {r404}, {r546}, {0x0, r494}, {}, {r537, r559}, {0x0, r443}, {r495}, {0x0, r491}, {}, {r492}, {0x0, r445}, {0x0, r487}, {r473}, {}, {0x0, r498}, {r408, r439}, {r452}, {0x0, r417}, {}, {r402}, {}, {r451, r434}, {r512}, {r541}, {r466, r438}, {r427}, {0x0, r503}, {r523, r533}, {}, {0x0, r547}, {0x0, r560}, {}, {}, {0x0, r420}, {r553}, {0x0, r527}, {}, {}, {r520, r545}, {}, {0x0, r479}, {0x0, r511}, {0x0, r500}, {r542, r531}, {0x0, r550}, {r539, r498}, {0x0, r554}, {r483, r396}, {0x0, r426}, {}, {0x0, r493}, {r513, r394}, {r484, r397}, {r395, r459}, {0x0, r455}, {0x0, r393}, {r456}, {}, {r551, r383}, {0x0, r501}, {0x0, r415}, {}, {r564, r481}, {}, {0x0, r509}, {0x0, r428}, {}, {}, {}, {}, {r496, r418}, {r446}, {r429}, {0x0, r524}, {}, {r499}, {}, {r441}, {r437}, {r562, r547}, {}, {0x0, r505}, {}, {0x0, r439}, {r458}, {0x0, r415}, {}, {}, {r558, r411}, {0x0, r469}, {0x0, r462}, {0x0, r413}, {0x0, r421}, {}, {r489}, {r447}, {r532}, {}, {0x0, r403}, {0x0, r450}, {0x0, r442}, {r470}, {0x0, r493}, {r506, r475}, {}, {r433}, {}, {}, {}, {r460, r474}, {r557, r462}, {r444, r410}, {r463}, {r510}, {}, {r525, r417}, {}, {}, {}, {}, {0x0, r422}, {r436, r485}, {0x0, r449}, {0x0, r515}, {}, {}, {r407, r552}, {}, {r497}, {}, {}, {r510, r543}, {}, {}, {r480}, {}, {}, {r510, r471}, {}, {0x0, r423}, {0x0, r519}, {r401, r393}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) r566 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r566, 0xc0105512, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r566, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r571}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r569}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r572}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r570}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {r571, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r712, r704}, {r700}, {0x0, r636}, {r617, r672}, {}, {r643}, {0x0, r656}, {r582}, {r658}, {}, {}, {}, {r626, r581}, {r717, r716}, {}, {}, {0x0, r727}, {}, {r580}, {0x0, r708}, {r711}, {r640}, {}, {r601}, {r630}, {0x0, r686}, {}, {0x0, r576}, {}, {}, {r694, r713}, {r738}, {}, {r591}, {}, {r726}, {}, {0x0, r596}, {0x0, r668}, {r740, r670}, {r606, r722}, {}, {r574}, {r664}, {}, {}, {0x0, r743}, {0x0, r689}, {}, {}, {r567, r607}, {0x0, r614}, {r568}, {}, {r645, r684}, {r737, r654}, {}, {r705, r689}, {0x0, r587}, {r650, r565}, {}, {r696}, {r660}, {r646}, {}, {}, {}, {}, {}, {0x0, r745}, {}, {0x0, r610}, {}, {}, {r733}, {0x0, r635}, {r647, r635}, {}, {}, {}, {}, {}, {r613, r597}, {}, {}, {0x0, r718}, {r594}, {0x0, r639}, {}, {}, {r720}, {r594}, {}, {r573, r588}, {}, {r612}, {0x0, r620}, {r712, r703}, {r643}, {r606, r731}, {r699, r684}, {r739, r659}, {r690, r710}, {0x0, r649}, {}, {r671}, {0x0, r636}, {0x0, r622}, {r730, r698}, {r598}, {0x0, r725}, {r688}, {r586}, {r728}, {0x0, r676}, {}, {r719, r741}, {0x0, r625}, {r677}, {0x0, r673}, {}, {r674}, {0x0, r627}, {0x0, r669}, {r655}, {}, {0x0, r680}, {r590, r621}, {r634}, {0x0, r599}, {}, {r584}, {}, {r633, r616}, {r694}, {r723}, {r648, r620}, {r609}, {0x0, r685}, {r705, r715}, {}, {0x0, r729}, {0x0, r742}, {}, {}, {0x0, r602}, {r735}, {0x0, r709}, {}, {}, {r702, r727}, {}, {0x0, r661}, {0x0, r693}, {0x0, r682}, {r724, r713}, {0x0, r732}, {r721, r680}, {0x0, r736}, {r665, r578}, {0x0, r608}, {}, {0x0, r675}, {r695, r576}, {r666, r579}, {r577, r641}, {0x0, r637}, {0x0, r575}, {r638}, {}, {r733, r565}, {0x0, r683}, {0x0, r597}, {}, {r746, r663}, {}, {0x0, r691}, {0x0, r610}, {}, {}, {}, {}, {r678, r600}, {r628}, {r611}, {0x0, r706}, {}, {r681}, {}, {r623}, {r619}, {r744, r729}, {}, {0x0, r687}, {}, {0x0, r621}, {r640}, {0x0, r597}, {}, {}, {r740, r593}, {0x0, r651}, {0x0, r644}, {0x0, r595}, {0x0, r603}, {}, {r671}, {r629}, {r714}, {}, {0x0, r585}, {0x0, r632}, {0x0, r624}, {r652}, {0x0, r675}, {r688, r657}, {}, {r615}, {}, {}, {}, {r642, r656}, {r739, r644}, {r626, r592}, {r645}, {r692}, {}, {r707, r599}, {}, {}, {}, {}, {0x0, r604}, {r618, r667}, {0x0, r631}, {0x0, r697}, {}, {}, {r589, r734}, {}, {r679}, {}, {}, {r692, r725}, {}, {}, {r662}, {}, {}, {r692, r653}, {}, {0x0, r605}, {0x0, r701}, {r583, r575}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000515c0)={0x803, [{}, {r302, r286}, {r276}, {0x0, r149}, {r114, r218}, {}, {r166}, {0x0, r192}, {r33}, {r194}, {}, {}, {}, {r131, r32}, {r320, r309}, {}, {}, {0x0, r343}, {}, {r29}, {0x0, r294}, {r300}, {r158}, {}, {r385}, {r141}, {0x0, r243}, {}, {0x0, r16}, {}, {}, {r264, r305}, {r365}, {}, {r58}, {}, {r342}, {}, {0x0, r76}, {0x0, r209}, {r368, r215}, {r91, r332}, {}, {r14}, {r204}, {}, {}, {0x0, r374}, {0x0, r249}, {}, {}, {r3, r93}, {0x0, r109}, {r4}, {}, {r169, r239}, {r361, r188}, {}, {r288, r249}, {0x0, r47}, {r175, r1}, {}, {r268}, {r198}, {r171}, {}, {}, {}, {}, {}, {0x0, r379}, {}, {0x0, r100}, {}, {}, {r355}, {0x0, r147}, {r172, r147}, {}, {}, {}, {}, {}, {r108, r79}, {}, {}, {0x0, r323}, {r73}, {0x0, r153}, {}, {}, {r326}, {r73}, {}, {r12, r49}, {}, {r105}, {0x0, r120}, {r302, r284}, {r166}, {r91, r352}, {r273, r239}, {r366, r195}, {r250, r297}, {0x0, r174}, {}, {r216}, {0x0, r149}, {0x0, r123}, {r348, r272}, {r80}, {0x0, r341}, {r248}, {r45}, {r344}, {0x0, r222}, {}, {r324, r369}, {0x0, r130}, {r223}, {0x0, r219}, {}, {r220}, {0x0, r132}, {0x0, r212}, {r191}, {}, {0x0, r231}, {r56, r122}, {r146}, {0x0, r81}, {}, {r36}, {}, {r145, r112}, {r264}, {r333}, {r173, r120}, {r99}, {0x0, r95}, {r288, r307}, {}, {0x0, r347}, {0x0, r370}, {}, {}, {0x0, r86}, {r357}, {0x0, r296}, {}, {r50}, {r283, r343}, {}, {0x0, r199}, {0x0, r259}, {0x0, r237}, {r340, r305}, {0x0, r354}, {r330, r231}, {0x0, r358}, {r205, r19}, {0x0, r95}, {}, {0x0, r221}, {r266, r16}, {r207, r382}, {r18, r161}, {0x0, r151}, {0x0, r15}, {r152}, {}, {r355, r1}, {0x0, r238}, {0x0, r79}, {}, {r380, r201}, {}, {0x0, r251}, {0x0, r100}, {}, {}, {}, {}, {r228, r83}, {r133}, {r101}, {r568, r290}, {}, {r235}, {}, {r124}, {r119}, {r378, r347}, {}, {0x0, r247}, {}, {0x0, r122}, {r158}, {0x0, r79}, {}, {}, {r368, r66}, {0x0, r176}, {0x0, r167}, {0x0, r74}, {0x0, r88}, {}, {r216}, {r134}, {r306}, {}, {0x0, r43}, {0x0, r144}, {0x0, r125}, {r178}, {0x0, r221}, {r248, r193}, {}, {r111}, {}, {}, {}, {r162, r192}, {r366, r167}, {r131, r64}, {r169}, {r258}, {}, {r291, r81}, {}, {}, {}, {}, {0x0, r89}, {r117, r208}, {0x0, r142}, {0x0, r269}, {}, {}, {r54, r356}, {}, {r230}, {}, {}, {r258, r341}, {}, {}, {r200}, {}, {}, {r258, r181}, {}, {0x0, r90}, {0x0, r277}, {r34, r15}], 0x43, "bccf4bb0345f69"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r3, 0x6d4a24c8}) 22:46:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa864300", 0x7}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ebc017c99611e0c9fdbde44b62c8a2523b64c881a4fa63e20bd7dfd1e6d53cb099b6f65582fae720a26b701970722401d7f508517a808f3a2e4b6cc37660f15038d8cdca16359484663ad8bcef9bebf14426f14afe6de68f65a29d70aa090b9e497ae90d3c18a21cec0c37cfe1091af263ceca53792b72166a6f73fd5d693a9472e606c5", 0x84}, {&(0x7f0000000100)="352879daac74c1bebedd4bc0dbb55eb63222458f52b6e412821b918e26bcee0a075326408db7272ab688355a6e5f69d4d2909ba9a9dfb7b880edbed95cfc58976557afb4282f0c3bf9567f3eb058b1ca128faabb7f972a861ae887b5556135b797412ecfef0deb600d3e2cf2fe161705d8c120ccecab87791477bc9022c8c22f96b09534997c446e02f04a0a6d55ac7f4a8c6accffc99a91eb9943fdfb2e56948e46b81e", 0xa4}, {&(0x7f0000000240)="b57429c70e3cea33731f6090d390e406d35f66a98f620248a1e41157", 0x1c}], 0x3) 22:46:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:46:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:29 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000100)="488c65331e62287e23677b419ea2dd5d40010c14f305585775b3", 0x1a}, {&(0x7f00000005c0)="e7d22baadca39c22fbb759d174bc48e5f1f75d2d057d7003b328e3d9737e7ac70b7fb42f5d4bb789caf6b2aa24ff1433c8e707e43bce9ce6727548a6af75c69d77125335bbeae0c01975f82b1c53595b5f14ad9193d49606651d4acd8d4e9fffd51567cc6fdd5536a07fe12a90a5718c39432048438548361a5d", 0x7a}, {&(0x7f0000000640)="8a16ec4e6cde632ac2e2be8a2ed8a54d045e49d2c733ffe1140153896e798adc0e47d882888af75db5780421c5b600d8c6e83b385d85b113188adc78cdb1117436aa84672a7e", 0x46}, {&(0x7f0000000240)="4070a24ec1010a91f934157a84ffe47f83ac36591f51b69331", 0x19}, {&(0x7f00000006c0)="3a78d0e5624881b350e068a0acf3d3a432e12123761a4961b841f5f69d259f91e705d9bccc821dd94ca947a0d2f1ba03128ab54d2c442de8c04588b069a9f00abd60e7d380b3b4f90b82afc817ce6a4adc57eb219fe60dbfc9c3c5b53b60afe3eaa66c00992c94307b12de1213dd60d00219e10755acea029ad538e622ed43361684cc7576f926fcaec62b29de9901c085c3b991e9d8c14077598dff7e2f9d10f6cdc28558ac7ed1041ff9b24960664f18641db87975acf2698df37e9154e6f49c", 0xc1}, {&(0x7f00000007c0)="e0aafde5bcfa809de750583bc8cfcc179aff3afc2d2e21159bbd9aa662c6aa0a2df4b7658d32d10a00d1d34a3d577a877d4c30c1d5cbf4b56374b80ddbf6d32daa7ea311db40ae2d74db7daa0b20cdb0d3b4d41916501febdb704cbdb1e9241ed9f0cfa113139a7ab79ae882a26764614a5b5999cebf08333cae95c48a4f41bfca123826b0d056963fadc809c28b90cda282772bfe88684f1bd49d859369bc1e3f010f8ce2303f", 0xa7}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="e4bf0cb18a66fb6e1336c04e0b237431f771f62db2244c538c16290daab7f477336fb0a63b6538dbbf4270583e59def8f311ae2e6e116c19c445333b1856ba1449556e1650ccc6bf5badc96415d7ca9489f494b7150aa97235d43b1eefbfd2290bb757922c0639cb80a9ef7c4a438d48ff66fb4499654e5fe70c975a9d33be68bdbbca2ebb8bcda5167abff5e0b80fc49d2c113c9eaefeff3761b49b46ffc277a9b4758012088633f5071fa8cd3a81c2189bacf6cee737a9228419b7163c27eda5f3194f1178e5fc2408bbfa50c434", 0xcf}], 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="55274446042e5b5d53019bdee69b275dde0dccbba2ec308c1011b94c7352db21e9242af840f08133f39e8d2cc8fba42af44576a3ad16e06a147dfb282de45c517a100536b1b10aa1a388808a83c2e74fce664f70d1f196c7a4fab7bcf48777c772bc51e1fa982ba7193e6a1528d384f8ba84aab8355d1fbccdebcd24f0f6628d63c95c0c8e351ddb9472963778c2d8f078d763651d365fea0f64b499b62bd9a7793da86d081df4c8475ae96291a026eb773c06a6f58641d348e93087bd04e4c6ca2246c2e0fe1ddceb", 0xc9}, {&(0x7f0000000140)="45eb9f048e1409b1b23e15e3b5f4237b66f63a76ce449a41179cc66a938bfd2288c9ef462a7ca0fddafe4764ec1e1d1660ac76a6166313a7f54cb7c60d2aa76f6b1331f1b321f92a6b8306d3eed74e3de51e9160c929d70ac71f6d96b4e13d7fc291dfeae72d54220df504875c897119cc", 0x71}, {&(0x7f00000002c0)="d51f29e4b273d52017fd056926537b242067cc2cb2ca97b232dbdfe12275b6efd3ce6851217f0c1bafa23cca69fd56fe0b5d4beeda0625575398be0e9e072d2b01ff81c7bf9a46c9fd247b770a2fc2775a0ef9fa2e946a270c6792e126fe6e8c2f3bc8aab7aecf511749bb6750ecdeefd590ea2fe84fdf3c1a2363755603a6362110c5c342e2021c2b7b84b243ecefc966be73260a2c87b2c5ef29f60d872222a4a01100f008b4b431b8c8d9350f64263362e209c3e09e0c2ad21e106fbf5ba03f98749f713fcd", 0xc7}, {&(0x7f00000003c0)="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", 0xfb}, {&(0x7f00000004c0)="93e7d602d73ae2a2621f97917c5d9c8ffa01eb705ced220c828b9ff777626ed9bd11d7b3ac7a42d26347b6a6c1116bbf4a7a00ab86b98db792ee673bb44d308df59c22d478f6c6cca9aa5b4d80f6c0d90980b83f45d4bae58636db6877203cd4d55f6d0540f9f7156adaecbf80c096ca274ee313d9946b630bbf1e870af3abd27b84f86171d4482afbf6db81215c76e0a9f09a49e654e0ed528b9763ff3e833ac458ea0db642fcb679b457b15a5985c1fdc3e2107f5f888e8ed67bf5735eec9cdca30a863cb60a7de5f3f9c80f11", 0xce}], 0x6) 22:46:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:46:29 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:29 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) 22:46:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:30 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:31 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:32 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000100)="488c65331e62287e23677b419ea2dd5d40010c14f305585775b3", 0x1a}, {&(0x7f00000005c0)="e7d22baadca39c22fbb759d174bc48e5f1f75d2d057d7003b328e3d9737e7ac70b7fb42f5d4bb789caf6b2aa24ff1433c8e707e43bce9ce6727548a6af75c69d77125335bbeae0c01975f82b1c53595b5f14ad9193d49606651d4acd8d4e9fffd51567cc6fdd5536a07fe12a90a5718c39432048438548361a5d", 0x7a}, {&(0x7f0000000640)="8a16ec4e6cde632ac2e2be8a2ed8a54d045e49d2c733ffe1140153896e798adc0e47d882888af75db5780421c5b600d8c6e83b385d85b113188adc78cdb1117436aa84672a7e", 0x46}, {&(0x7f0000000240)="4070a24ec1010a91f934157a84ffe47f83ac36591f51b69331", 0x19}, {&(0x7f00000006c0)="3a78d0e5624881b350e068a0acf3d3a432e12123761a4961b841f5f69d259f91e705d9bccc821dd94ca947a0d2f1ba03128ab54d2c442de8c04588b069a9f00abd60e7d380b3b4f90b82afc817ce6a4adc57eb219fe60dbfc9c3c5b53b60afe3eaa66c00992c94307b12de1213dd60d00219e10755acea029ad538e622ed43361684cc7576f926fcaec62b29de9901c085c3b991e9d8c14077598dff7e2f9d10f6cdc28558ac7ed1041ff9b24960664f18641db87975acf2698df37e9154e6f49c", 0xc1}, {&(0x7f00000007c0)="e0aafde5bcfa809de750583bc8cfcc179aff3afc2d2e21159bbd9aa662c6aa0a2df4b7658d32d10a00d1d34a3d577a877d4c30c1d5cbf4b56374b80ddbf6d32daa7ea311db40ae2d74db7daa0b20cdb0d3b4d41916501febdb704cbdb1e9241ed9f0cfa113139a7ab79ae882a26764614a5b5999cebf08333cae95c48a4f41bfca123826b0d056963fadc809c28b90cda282772bfe88684f1bd49d859369bc1e3f010f8ce2303f", 0xa7}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="e4bf0cb18a66fb6e1336c04e0b237431f771f62db2244c538c16290daab7f477336fb0a63b6538dbbf4270583e59def8f311ae2e6e116c19c445333b1856ba1449556e1650ccc6bf5badc96415d7ca9489f494b7150aa97235d43b1eefbfd2290bb757922c0639cb80a9ef7c4a438d48ff66fb4499654e5fe70c975a9d33be68bdbbca2ebb8bcda5167abff5e0b80fc49d2c113c9eaefeff3761b49b46ffc277a9b4758012088633f5071fa8cd3a81c2189bacf6cee737a9228419b7163c27eda5f3194f1178e5fc2408bbfa50c434", 0xcf}], 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="55274446042e5b5d53019bdee69b275dde0dccbba2ec308c1011b94c7352db21e9242af840f08133f39e8d2cc8fba42af44576a3ad16e06a147dfb282de45c517a100536b1b10aa1a388808a83c2e74fce664f70d1f196c7a4fab7bcf48777c772bc51e1fa982ba7193e6a1528d384f8ba84aab8355d1fbccdebcd24f0f6628d63c95c0c8e351ddb9472963778c2d8f078d763651d365fea0f64b499b62bd9a7793da86d081df4c8475ae96291a026eb773c06a6f58641d348e93087bd04e4c6ca2246c2e0fe1ddceb", 0xc9}, {&(0x7f0000000140)="45eb9f048e1409b1b23e15e3b5f4237b66f63a76ce449a41179cc66a938bfd2288c9ef462a7ca0fddafe4764ec1e1d1660ac76a6166313a7f54cb7c60d2aa76f6b1331f1b321f92a6b8306d3eed74e3de51e9160c929d70ac71f6d96b4e13d7fc291dfeae72d54220df504875c897119cc", 0x71}, {&(0x7f00000002c0)="d51f29e4b273d52017fd056926537b242067cc2cb2ca97b232dbdfe12275b6efd3ce6851217f0c1bafa23cca69fd56fe0b5d4beeda0625575398be0e9e072d2b01ff81c7bf9a46c9fd247b770a2fc2775a0ef9fa2e946a270c6792e126fe6e8c2f3bc8aab7aecf511749bb6750ecdeefd590ea2fe84fdf3c1a2363755603a6362110c5c342e2021c2b7b84b243ecefc966be73260a2c87b2c5ef29f60d872222a4a01100f008b4b431b8c8d9350f64263362e209c3e09e0c2ad21e106fbf5ba03f98749f713fcd", 0xc7}, {&(0x7f00000003c0)="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", 0xfb}, {&(0x7f00000004c0)="93e7d602d73ae2a2621f97917c5d9c8ffa01eb705ced220c828b9ff777626ed9bd11d7b3ac7a42d26347b6a6c1116bbf4a7a00ab86b98db792ee673bb44d308df59c22d478f6c6cca9aa5b4d80f6c0d90980b83f45d4bae58636db6877203cd4d55f6d0540f9f7156adaecbf80c096ca274ee313d9946b630bbf1e870af3abd27b84f86171d4482afbf6db81215c76e0a9f09a49e654e0ed528b9763ff3e833ac458ea0db642fcb679b457b15a5985c1fdc3e2107f5f888e8ed67bf5735eec9cdca30a863cb60a7de5f3f9c80f11", 0xce}], 0x6) 22:46:32 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:32 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:33 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:33 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:35 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:35 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000100)="488c65331e62287e23677b419ea2dd5d40010c14f305585775b3", 0x1a}, {&(0x7f00000005c0)="e7d22baadca39c22fbb759d174bc48e5f1f75d2d057d7003b328e3d9737e7ac70b7fb42f5d4bb789caf6b2aa24ff1433c8e707e43bce9ce6727548a6af75c69d77125335bbeae0c01975f82b1c53595b5f14ad9193d49606651d4acd8d4e9fffd51567cc6fdd5536a07fe12a90a5718c39432048438548361a5d", 0x7a}, {&(0x7f0000000640)="8a16ec4e6cde632ac2e2be8a2ed8a54d045e49d2c733ffe1140153896e798adc0e47d882888af75db5780421c5b600d8c6e83b385d85b113188adc78cdb1117436aa84672a7e", 0x46}, {&(0x7f0000000240)="4070a24ec1010a91f934157a84ffe47f83ac36591f51b69331", 0x19}, {&(0x7f00000006c0)="3a78d0e5624881b350e068a0acf3d3a432e12123761a4961b841f5f69d259f91e705d9bccc821dd94ca947a0d2f1ba03128ab54d2c442de8c04588b069a9f00abd60e7d380b3b4f90b82afc817ce6a4adc57eb219fe60dbfc9c3c5b53b60afe3eaa66c00992c94307b12de1213dd60d00219e10755acea029ad538e622ed43361684cc7576f926fcaec62b29de9901c085c3b991e9d8c14077598dff7e2f9d10f6cdc28558ac7ed1041ff9b24960664f18641db87975acf2698df37e9154e6f49c", 0xc1}, {&(0x7f00000007c0)="e0aafde5bcfa809de750583bc8cfcc179aff3afc2d2e21159bbd9aa662c6aa0a2df4b7658d32d10a00d1d34a3d577a877d4c30c1d5cbf4b56374b80ddbf6d32daa7ea311db40ae2d74db7daa0b20cdb0d3b4d41916501febdb704cbdb1e9241ed9f0cfa113139a7ab79ae882a26764614a5b5999cebf08333cae95c48a4f41bfca123826b0d056963fadc809c28b90cda282772bfe88684f1bd49d859369bc1e3f010f8ce2303f", 0xa7}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="e4bf0cb18a66fb6e1336c04e0b237431f771f62db2244c538c16290daab7f477336fb0a63b6538dbbf4270583e59def8f311ae2e6e116c19c445333b1856ba1449556e1650ccc6bf5badc96415d7ca9489f494b7150aa97235d43b1eefbfd2290bb757922c0639cb80a9ef7c4a438d48ff66fb4499654e5fe70c975a9d33be68bdbbca2ebb8bcda5167abff5e0b80fc49d2c113c9eaefeff3761b49b46ffc277a9b4758012088633f5071fa8cd3a81c2189bacf6cee737a9228419b7163c27eda5f3194f1178e5fc2408bbfa50c434", 0xcf}], 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="55274446042e5b5d53019bdee69b275dde0dccbba2ec308c1011b94c7352db21e9242af840f08133f39e8d2cc8fba42af44576a3ad16e06a147dfb282de45c517a100536b1b10aa1a388808a83c2e74fce664f70d1f196c7a4fab7bcf48777c772bc51e1fa982ba7193e6a1528d384f8ba84aab8355d1fbccdebcd24f0f6628d63c95c0c8e351ddb9472963778c2d8f078d763651d365fea0f64b499b62bd9a7793da86d081df4c8475ae96291a026eb773c06a6f58641d348e93087bd04e4c6ca2246c2e0fe1ddceb", 0xc9}, {&(0x7f0000000140)="45eb9f048e1409b1b23e15e3b5f4237b66f63a76ce449a41179cc66a938bfd2288c9ef462a7ca0fddafe4764ec1e1d1660ac76a6166313a7f54cb7c60d2aa76f6b1331f1b321f92a6b8306d3eed74e3de51e9160c929d70ac71f6d96b4e13d7fc291dfeae72d54220df504875c897119cc", 0x71}, {&(0x7f00000002c0)="d51f29e4b273d52017fd056926537b242067cc2cb2ca97b232dbdfe12275b6efd3ce6851217f0c1bafa23cca69fd56fe0b5d4beeda0625575398be0e9e072d2b01ff81c7bf9a46c9fd247b770a2fc2775a0ef9fa2e946a270c6792e126fe6e8c2f3bc8aab7aecf511749bb6750ecdeefd590ea2fe84fdf3c1a2363755603a6362110c5c342e2021c2b7b84b243ecefc966be73260a2c87b2c5ef29f60d872222a4a01100f008b4b431b8c8d9350f64263362e209c3e09e0c2ad21e106fbf5ba03f98749f713fcd", 0xc7}, {&(0x7f00000003c0)="0be7132f97817cbbf8ab4f282d514f656ec0da3e444f3e05f383fb8709565684458f7f17e84e5326231887c6f96a9eff4cae0680a22d0a5e7382ae5becea62a2de995d13cf232333732a6875c7aab7fd992cc7056148e0c254fdb9c3db50ffa52dbb030b9ae1e814bfea85151d9a47789ee0f45e42cda2b9742b58ee83207f807d1b5f18173262b3b08c686223c65380e762c6d89611e72bff90c2d28e21e301ee0aa898babf6e29d3f452d1ec39673f1c3f5f0b7188a80bed09ecb63bac600a19c602bacd0242b045e39fd6559854a33e5da2bcc3532f84f4d2111a913b4b7b1a039e87c4ca90adbd05c937639d17c359efc5ac4c6bcc29e824dd", 0xfb}, {&(0x7f00000004c0)="93e7d602d73ae2a2621f97917c5d9c8ffa01eb705ced220c828b9ff777626ed9bd11d7b3ac7a42d26347b6a6c1116bbf4a7a00ab86b98db792ee673bb44d308df59c22d478f6c6cca9aa5b4d80f6c0d90980b83f45d4bae58636db6877203cd4d55f6d0540f9f7156adaecbf80c096ca274ee313d9946b630bbf1e870af3abd27b84f86171d4482afbf6db81215c76e0a9f09a49e654e0ed528b9763ff3e833ac458ea0db642fcb679b457b15a5985c1fdc3e2107f5f888e8ed67bf5735eec9cdca30a863cb60a7de5f3f9c80f11", 0xce}], 0x6) 22:46:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="de80675979b7157c24c10599f5daff925d86c6ca7f6ad197b379c3dc7a18b7dc403a351804260960bf55ddd8994b721a593c8ba8d13e1b3bd19fb06e70eabbb7132ba69858992893930d894e33b947b409221ff94ba954692f0686b5034994771033e9113e89a2664e874fa81b0eb8e2bcad2aac2067af650ccd16832abebf34cba57e03c84f806e986d1225602a", 0x8e}], 0x2) 22:46:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:36 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) getresgid(0x0, &(0x7f0000000180)=0x0, 0x0) r3 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00, r2}, 0xc5b, 0x100, 0x6, 0x0, 0x0, r3, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:46:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="de80675979b7157c24c10599f5daff925d86c6ca7f6ad197b379c3dc7a18b7dc403a351804260960bf55ddd8994b721a593c8ba8d13e1b3bd19fb06e70eabbb7132ba69858992893930d894e33b947b409221ff94ba954692f0686b5034994771033e9113e89a2664e874fa81b0eb8e2bcad2aac2067af650ccd16832abebf34cba57e03c84f806e986d1225602a", 0x8e}], 0x2) 22:46:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000050e003900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:37 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}], 0x2) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x488100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x8}, 0x8) 22:46:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="8e0e9b3e", 0x4}, {&(0x7f0000000000)="de80675979b7157c24c10599f5daff925d86c6ca7f6ad197b379c3dc7a18b7dc403a351804260960bf55ddd8994b721a593c8ba8d13e1b3bd19fb06e70eabbb7132ba69858992893930d894e33b947b409221ff94ba954692f0686b5034994771033e9113e89a2664e874fa81b0eb8e2bcad2aac2067af650ccd16832abebf34cba57e03c84f806e986d1225602a", 0x8e}], 0x2) 22:46:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fa2074fa589a78878643"}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x2c, 0x4, 0x0, 0x6, 0xb0, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @ssrr={0x89, 0xf, 0x73, [@dev={0xac, 0x14, 0x14, 0x14}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x80000000}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0x5, 0x38, [0x8, 0x8, 0x9, 0x1], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000600)={0x10, 0x1e0, 0x3c0, 0x480, 0x0, 0x9, 0x18, 0x0, {0x3ff, 0x1}, {0xf7e2, 0x600000}, {0x0, 0xff, 0x1}, {0x6, 0x4, 0x1}, 0x1, 0x100, 0x8, 0x8, 0x0, 0x7ee3ae2a, 0x5, 0x7ff, 0x9, 0x800, 0x0, 0xbdd, 0x0, 0x100, 0x3, 0x4}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:46:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:38 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1c89b) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}, {&(0x7f0000000000)="3b041be4749eae416f43d9ab699a5355e871f4ace3317e97e791b6b94aa5c6f47dfcd051b8ea79010416b000b41f7a0d012f3ac65b0784ba954d5c7b0b7d8aa7ff57e1ebb927db8195848b0060461c47f6f98b08bc045b1d864aa36069ad44d92eb615fb0e297fc92386ae2f4cf8ff131664465ba8a3211989a11ccaddef117b5accad7b17a8a2e28ef597e852b91d4df8852843ff6e3bbfa58f19932ecdb84216ab18a4230db974aecefaf3d8121071f05a866c40b2e9a3b08d52ddcdad664aa3eace6f7cf58e3bb8cff1a7296cc0bd7fb4048e9c94368640afdc264b8621d60aa50c84701b20b53d34", 0xea}, {&(0x7f00000001c0)="672ba67033d422eb60a4106a69d51f86f76c8b827fe46426c7baa46cbbed20d19bbcf18fb348e4e60f16905e0466654a7ddc8fa66dd0c3d5a54b63425f24cf9cd7b643f2ba8d80096d65c8d6306526cf5bc3f0cd713179f64d63f9", 0x5b}], 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/88, 0x58, 0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x989680}) 22:46:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="8e0e9b3e", 0x4}, {&(0x7f0000000040)="dc70af1bad538a1379a81faed11181d69c8e866182e40469d9573409ba0e7f8d02caa4a82f7bf38c0af4480a5f5082760aaa48a138ea37f67502592afa2c710e55a5009289362f6c61a450c24ba8b350c13912fbf828cd07240f256a4be6fbe65ea420ef950ebdfc768fadcb9c426ab3daf58fc6817c78a5debff126d2b9e139c55c07a8b09cfbaa", 0x88}, {&(0x7f0000000240)="929c1f8e29b0060000004a59fdd7f42d1e0dd66efe1706fb09886c29e7dc514c729e43df82e209e563561ae4ef4b", 0x2e}, {&(0x7f0000000140)="d6c15d93c30fa2d4745556997d09f7f7517588812114e5cab0634b", 0x1b}, {&(0x7f0000000180)="ca543fe0b8050900000000000000b158e3ff7e7767c17b1ec2388454e6fdeb9c214d2d74798874076a500d231eab1c201e7016afd49e555a36f8109f1a1b0c816a2769cc12dc973bb2c8f0206cc9cd1102850c091644b458c8e42802c976eb35380547ad7b047ea3b19be71697e9a122e3bc1ccd019d7adeb69e8e9deb750a4c8c56d0", 0x83}, {&(0x7f00000002c0)="997bf43f6d12b6bbed4640c7eec82e9db2c867efdd41130063c119a2550f2d372bcdc9729a3f15613bffe64811123fd5bd3c5a1d454607d3337e161b7134208e419a0c470c2059fd5f90f10b40b0c88e8cfc5a0f43d78d3a853a2c1e0d4f4f011b4d7c7b4532acbfdc9776e871633d6e957642e3b0a851ebbf62db782c2711625e8d30fac2ff3d12020d215387b1f8e316e1f3c73d30e80f2c68f843096941ec0a40a1d8f9201781873034425940efba71252e8c0b6f8d044cc2c4fd0a15ad22dd7f62a3963d841d692d11a6787b2a0ee6409fce775acc0007aea9d53c2b365d653c00"/254, 0xfe}], 0x6) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4}, 0xc) sendmmsg$inet_sctp(r1, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x2, r4}}], 0x20}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r6}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={r6, @in6={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, 0x400, 0x3f}, &(0x7f0000000100)=0x90) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x18, 0x196, &(0x7f0000000580)="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"}) [ 1278.823647][T22343] xt_CT: You must specify a L4 protocol and not use inversions on it 22:46:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="f095668ea23a00494daa9be431c0b27501b2604e74153b60782a1163f78f53433bfb18ffdf5878472cc43d735188f68a69de80da85536baa867033c83db7b75f83697918e9678fc605838a14a7d5eaebcddc5b3f2da4d2714be6b8719ef578268a04e074b4ef181430d8679127cd8e719cc5fcdea093f688886779fde21ee9626eca11ff905fec43b277398785276f68b7c4eba7dc2b4e383419e33068f16cca4fab8b2e16b2feaaf704251e6c59", 0xae}, {&(0x7f00000000c0)="959228c918f5d7d84f0d5307434b99d54339329281a8f92631c6d13c9513d9", 0x1f}, {&(0x7f00000002c0)="40a07771b01c1060c6cd82b63f8935482a913870657e1277e59bf96b1dfa153624b8cbae99dd3d9d737bdfe17ef4be28b9ae2efadc01aeccac7b7b42bc5058d5c12ed661bc7efd517040cfdecdc1e90abd59af9ab312cc096ef6a0fb39e3d810b95c87d2a1079e06a968104cf2eff802f5000a5d5c8b27d402b436709d4c703e7be21a5acf977d61cafe7d7848fa06cbf589ebfb40e37c7d679da72280717aa79ee40a51316d80fbb89264c024f281ff2c234d986301f2ff9d0a7beab1e91d9a780de6d25283af763081a801b428", 0xce}, {&(0x7f00000003c0)="dc9693dda38b5d5ee04421d8d23f1750dd58c3d52c4f3a569f32f99bfd5ddfaac357bc198bc573b0713ddc3bed70970263ce03b1455ffeda8a2d7663ff0c2e8b6dafa3583949700876a71cfa27842be5cc2c304d192ad1e44df546b25d7088d203a02aca0e6b8017452f2625be4217983cea3085579e7eef81de97a0425c74f2c1170fde473ce3b2bf3cd5071fed0fa95fe2acae0dfd50b50b26932b47d0cd424273e53c1bb07f80", 0xa8}, {&(0x7f0000000480)="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", 0xfa}], 0x5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000240)={0x4, 0x9, 0x3, 0x4}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8f7, 0x778, 0x101, 0x2, 0x40, "ef0285e5d58595b51a4e732df58f85ee95b642", 0x80c, 0x3b50}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r2, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) 22:46:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="f095668ea23a00494daa9be431c0b27501b2604e74153b60782a1163f78f53433bfb18ffdf5878472cc43d735188f68a69de80da85536baa867033c83db7b75f83697918e9678fc605838a14a7d5eaebcddc5b3f2da4d2714be6b8719ef578268a04e074b4ef181430d8679127cd8e719cc5fcdea093f688886779fde21ee9626eca11ff905fec43b277398785276f68b7c4eba7dc2b4e383419e33068f16cca4fab8b2e16b2feaaf704251e6c59", 0xae}, {&(0x7f00000000c0)="959228c918f5d7d84f0d5307434b99d54339329281a8f92631c6d13c9513d9", 0x1f}, {&(0x7f00000002c0)="40a07771b01c1060c6cd82b63f8935482a913870657e1277e59bf96b1dfa153624b8cbae99dd3d9d737bdfe17ef4be28b9ae2efadc01aeccac7b7b42bc5058d5c12ed661bc7efd517040cfdecdc1e90abd59af9ab312cc096ef6a0fb39e3d810b95c87d2a1079e06a968104cf2eff802f5000a5d5c8b27d402b436709d4c703e7be21a5acf977d61cafe7d7848fa06cbf589ebfb40e37c7d679da72280717aa79ee40a51316d80fbb89264c024f281ff2c234d986301f2ff9d0a7beab1e91d9a780de6d25283af763081a801b428", 0xce}, {&(0x7f00000003c0)="dc9693dda38b5d5ee04421d8d23f1750dd58c3d52c4f3a569f32f99bfd5ddfaac357bc198bc573b0713ddc3bed70970263ce03b1455ffeda8a2d7663ff0c2e8b6dafa3583949700876a71cfa27842be5cc2c304d192ad1e44df546b25d7088d203a02aca0e6b8017452f2625be4217983cea3085579e7eef81de97a0425c74f2c1170fde473ce3b2bf3cd5071fed0fa95fe2acae0dfd50b50b26932b47d0cd424273e53c1bb07f80", 0xa8}, {&(0x7f0000000480)="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", 0xfa}], 0x5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000240)={0x4, 0x9, 0x3, 0x4}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8f7, 0x778, 0x101, 0x2, 0x40, "ef0285e5d58595b51a4e732df58f85ee95b642", 0x80c, 0x3b50}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r2, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) 22:46:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1279.427193][T22358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1279.616452][T22362] xt_CT: You must specify a L4 protocol and not use inversions on it 22:46:40 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1c89b) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}, {&(0x7f0000000000)="3b041be4749eae416f43d9ab699a5355e871f4ace3317e97e791b6b94aa5c6f47dfcd051b8ea79010416b000b41f7a0d012f3ac65b0784ba954d5c7b0b7d8aa7ff57e1ebb927db8195848b0060461c47f6f98b08bc045b1d864aa36069ad44d92eb615fb0e297fc92386ae2f4cf8ff131664465ba8a3211989a11ccaddef117b5accad7b17a8a2e28ef597e852b91d4df8852843ff6e3bbfa58f19932ecdb84216ab18a4230db974aecefaf3d8121071f05a866c40b2e9a3b08d52ddcdad664aa3eace6f7cf58e3bb8cff1a7296cc0bd7fb4048e9c94368640afdc264b8621d60aa50c84701b20b53d34", 0xea}, {&(0x7f00000001c0)="672ba67033d422eb60a4106a69d51f86f76c8b827fe46426c7baa46cbbed20d19bbcf18fb348e4e60f16905e0466654a7ddc8fa66dd0c3d5a54b63425f24cf9cd7b643f2ba8d80096d65c8d6306526cf5bc3f0cd713179f64d63f9", 0x5b}], 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/88, 0x58, 0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x989680}) 22:46:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="f095668ea23a00494daa9be431c0b27501b2604e74153b60782a1163f78f53433bfb18ffdf5878472cc43d735188f68a69de80da85536baa867033c83db7b75f83697918e9678fc605838a14a7d5eaebcddc5b3f2da4d2714be6b8719ef578268a04e074b4ef181430d8679127cd8e719cc5fcdea093f688886779fde21ee9626eca11ff905fec43b277398785276f68b7c4eba7dc2b4e383419e33068f16cca4fab8b2e16b2feaaf704251e6c59", 0xae}, {&(0x7f00000000c0)="959228c918f5d7d84f0d5307434b99d54339329281a8f92631c6d13c9513d9", 0x1f}, {&(0x7f00000002c0)="40a07771b01c1060c6cd82b63f8935482a913870657e1277e59bf96b1dfa153624b8cbae99dd3d9d737bdfe17ef4be28b9ae2efadc01aeccac7b7b42bc5058d5c12ed661bc7efd517040cfdecdc1e90abd59af9ab312cc096ef6a0fb39e3d810b95c87d2a1079e06a968104cf2eff802f5000a5d5c8b27d402b436709d4c703e7be21a5acf977d61cafe7d7848fa06cbf589ebfb40e37c7d679da72280717aa79ee40a51316d80fbb89264c024f281ff2c234d986301f2ff9d0a7beab1e91d9a780de6d25283af763081a801b428", 0xce}, {&(0x7f00000003c0)="dc9693dda38b5d5ee04421d8d23f1750dd58c3d52c4f3a569f32f99bfd5ddfaac357bc198bc573b0713ddc3bed70970263ce03b1455ffeda8a2d7663ff0c2e8b6dafa3583949700876a71cfa27842be5cc2c304d192ad1e44df546b25d7088d203a02aca0e6b8017452f2625be4217983cea3085579e7eef81de97a0425c74f2c1170fde473ce3b2bf3cd5071fed0fa95fe2acae0dfd50b50b26932b47d0cd424273e53c1bb07f80", 0xa8}, {&(0x7f0000000480)="ee3e3a0b6fa47de6d1d413ba2163c9e46133b2fee1b6e363a77a3261928bb1f379fb5a55400bc54b736af5df75f6f0eb5e7b897986f75c527df6abf44d4088ef2902725b847f8ef71fd435bb3c54c2db6d1b623583e09cadd8d60ec41e056c93ce908416e64cae08dfc35cfcfc53596babddb2b3cc40f56cf3ad93e162232da39560f93b803ebae0458105c256cf5aa04b06fe6f27625011b5287fe68402f9952e27ebb40bb7bce7d8721c7ad8fae2726ba6b3b24297cad728523f483d3e941b6647f09851eaf877021a1cbe875a91c8fb69f775aa19e5e356b61d6fbb8595b7b90b109c156a32c72cefa803b034767c5e3c6818a0e2cf482ac0", 0xfa}], 0x5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000240)={0x4, 0x9, 0x3, 0x4}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8f7, 0x778, 0x101, 0x2, 0x40, "ef0285e5d58595b51a4e732df58f85ee95b642", 0x80c, 0x3b50}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r2, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) 22:46:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1280.937435][T22381] xt_CT: You must specify a L4 protocol and not use inversions on it 22:46:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:41 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x1c89b) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}, {&(0x7f0000000180)="de", 0x1}, {&(0x7f0000000000)="3b041be4749eae416f43d9ab699a5355e871f4ace3317e97e791b6b94aa5c6f47dfcd051b8ea79010416b000b41f7a0d012f3ac65b0784ba954d5c7b0b7d8aa7ff57e1ebb927db8195848b0060461c47f6f98b08bc045b1d864aa36069ad44d92eb615fb0e297fc92386ae2f4cf8ff131664465ba8a3211989a11ccaddef117b5accad7b17a8a2e28ef597e852b91d4df8852843ff6e3bbfa58f19932ecdb84216ab18a4230db974aecefaf3d8121071f05a866c40b2e9a3b08d52ddcdad664aa3eace6f7cf58e3bb8cff1a7296cc0bd7fb4048e9c94368640afdc264b8621d60aa50c84701b20b53d34", 0xea}, {&(0x7f00000001c0)="672ba67033d422eb60a4106a69d51f86f76c8b827fe46426c7baa46cbbed20d19bbcf18fb348e4e60f16905e0466654a7ddc8fa66dd0c3d5a54b63425f24cf9cd7b643f2ba8d80096d65c8d6306526cf5bc3f0cd713179f64d63f9", 0x5b}], 0x4) mq_timedreceive(0xffffffffffffffff, &(0x7f00000002c0)=""/88, 0x58, 0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x989680}) 22:46:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="8e0e9b3e", 0x4}, {&(0x7f0000000040)="dc70af1bad538a1379a81faed11181d69c8e866182e40469d9573409ba0e7f8d02caa4a82f7bf38c0af4480a5f5082760aaa48a138ea37f67502592afa2c710e55a5009289362f6c61a450c24ba8b350c13912fbf828cd07240f256a4be6fbe65ea420ef950ebdfc768fadcb9c426ab3daf58fc6817c78a5debff126d2b9e139c55c07a8b09cfbaa", 0x88}, {&(0x7f0000000240)="929c1f8e29b0060000004a59fdd7f42d1e0dd66efe1706fb09886c29e7dc514c729e43df82e209e563561ae4ef4b", 0x2e}, {&(0x7f0000000140)="d6c15d93c30fa2d4745556997d09f7f7517588812114e5cab0634b", 0x1b}, {&(0x7f0000000180)="ca543fe0b8050900000000000000b158e3ff7e7767c17b1ec2388454e6fdeb9c214d2d74798874076a500d231eab1c201e7016afd49e555a36f8109f1a1b0c816a2769cc12dc973bb2c8f0206cc9cd1102850c091644b458c8e42802c976eb35380547ad7b047ea3b19be71697e9a122e3bc1ccd019d7adeb69e8e9deb750a4c8c56d0", 0x83}, {&(0x7f00000002c0)="997bf43f6d12b6bbed4640c7eec82e9db2c867efdd41130063c119a2550f2d372bcdc9729a3f15613bffe64811123fd5bd3c5a1d454607d3337e161b7134208e419a0c470c2059fd5f90f10b40b0c88e8cfc5a0f43d78d3a853a2c1e0d4f4f011b4d7c7b4532acbfdc9776e871633d6e957642e3b0a851ebbf62db782c2711625e8d30fac2ff3d12020d215387b1f8e316e1f3c73d30e80f2c68f843096941ec0a40a1d8f9201781873034425940efba71252e8c0b6f8d044cc2c4fd0a15ad22dd7f62a3963d841d692d11a6787b2a0ee6409fce775acc0007aea9d53c2b365d653c00"/254, 0xfe}], 0x6) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4}, 0xc) sendmmsg$inet_sctp(r1, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x2, r4}}], 0x20}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r6}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={r6, @in6={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, 0x400, 0x3f}, &(0x7f0000000100)=0x90) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x18, 0x196, &(0x7f0000000580)="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"}) 22:46:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fadfc219d204650ca443"}) r1 = socket$pptp(0x18, 0x1, 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="3d6e3ac730779143a709e1f4ccaac76d09135ee1e3f5b493987b2a846482dd1cef1b8ef27d1ef8ca6119edac01c16d7107f0ce303f9d95c12015b4947e1c67277ea4a00212dacafa18db0d8ed9660265ab5c20f8c218e459c939d8b1d19b9cfb7e360056559c8318e877f76dc1632d71d437652ae635ae7f1c8e8c7f65b03e4d370815b8ec1cf305c7032e0a5c4097c906721b52234fe56a43d3665f6ae94daa9fc26f721f4dc4eeb79f5765b9661035a4f937a923234e112b3697cc9c95384b49dbb58a0130df232a5b49ca90d20f45", 0xd0}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) read(r0, &(0x7f0000000040)=""/95, 0x5f) 22:46:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:46:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fadfc219d204650ca443"}) r1 = socket$pptp(0x18, 0x1, 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="3d6e3ac730779143a709e1f4ccaac76d09135ee1e3f5b493987b2a846482dd1cef1b8ef27d1ef8ca6119edac01c16d7107f0ce303f9d95c12015b4947e1c67277ea4a00212dacafa18db0d8ed9660265ab5c20f8c218e459c939d8b1d19b9cfb7e360056559c8318e877f76dc1632d71d437652ae635ae7f1c8e8c7f65b03e4d370815b8ec1cf305c7032e0a5c4097c906721b52234fe56a43d3665f6ae94daa9fc26f721f4dc4eeb79f5765b9661035a4f937a923234e112b3697cc9c95384b49dbb58a0130df232a5b49ca90d20f45", 0xd0}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) read(r0, &(0x7f0000000040)=""/95, 0x5f) 22:46:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="8e0e9b3e", 0x4}, {&(0x7f0000000040)="dc70af1bad538a1379a81faed11181d69c8e866182e40469d9573409ba0e7f8d02caa4a82f7bf38c0af4480a5f5082760aaa48a138ea37f67502592afa2c710e55a5009289362f6c61a450c24ba8b350c13912fbf828cd07240f256a4be6fbe65ea420ef950ebdfc768fadcb9c426ab3daf58fc6817c78a5debff126d2b9e139c55c07a8b09cfbaa", 0x88}, {&(0x7f0000000240)="929c1f8e29b0060000004a59fdd7f42d1e0dd66efe1706fb09886c29e7dc514c729e43df82e209e563561ae4ef4b", 0x2e}, {&(0x7f0000000140)="d6c15d93c30fa2d4745556997d09f7f7517588812114e5cab0634b", 0x1b}, {&(0x7f0000000180)="ca543fe0b8050900000000000000b158e3ff7e7767c17b1ec2388454e6fdeb9c214d2d74798874076a500d231eab1c201e7016afd49e555a36f8109f1a1b0c816a2769cc12dc973bb2c8f0206cc9cd1102850c091644b458c8e42802c976eb35380547ad7b047ea3b19be71697e9a122e3bc1ccd019d7adeb69e8e9deb750a4c8c56d0", 0x83}, {&(0x7f00000002c0)="997bf43f6d12b6bbed4640c7eec82e9db2c867efdd41130063c119a2550f2d372bcdc9729a3f15613bffe64811123fd5bd3c5a1d454607d3337e161b7134208e419a0c470c2059fd5f90f10b40b0c88e8cfc5a0f43d78d3a853a2c1e0d4f4f011b4d7c7b4532acbfdc9776e871633d6e957642e3b0a851ebbf62db782c2711625e8d30fac2ff3d12020d215387b1f8e316e1f3c73d30e80f2c68f843096941ec0a40a1d8f9201781873034425940efba71252e8c0b6f8d044cc2c4fd0a15ad22dd7f62a3963d841d692d11a6787b2a0ee6409fce775acc0007aea9d53c2b365d653c00"/254, 0xfe}], 0x6) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket(0xa, 0x1, 0x0) close(r2) sendmmsg$inet_sctp(r2, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4}, 0xc) sendmmsg$inet_sctp(r1, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x2, r4}}], 0x20}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r6}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={r6, @in6={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, 0x400, 0x3f}, &(0x7f0000000100)=0x90) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x18, 0x196, &(0x7f0000000580)="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"}) 22:46:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xd0, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x7, 0x6, 0xd, 0x2, 0x4]}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'vlan0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="f095668ea23a00494daa9be431c0b27501b2604e74153b60782a1163f78f53433bfb18ffdf5878472cc43d735188f68a69de80da85536baa867033c83db7b75f83697918e9678fc605838a14a7d5eaebcddc5b3f2da4d2714be6b8719ef578268a04e074b4ef181430d8679127cd8e719cc5fcdea093f688886779fde21ee9626eca11ff905fec43b277398785276f68b7c4eba7dc2b4e383419e33068f16cca4fab8b2e16b2feaaf704251e6c59", 0xae}, {&(0x7f00000000c0)="959228c918f5d7d84f0d5307434b99d54339329281a8f92631c6d13c9513d9", 0x1f}, {&(0x7f00000002c0)="40a07771b01c1060c6cd82b63f8935482a913870657e1277e59bf96b1dfa153624b8cbae99dd3d9d737bdfe17ef4be28b9ae2efadc01aeccac7b7b42bc5058d5c12ed661bc7efd517040cfdecdc1e90abd59af9ab312cc096ef6a0fb39e3d810b95c87d2a1079e06a968104cf2eff802f5000a5d5c8b27d402b436709d4c703e7be21a5acf977d61cafe7d7848fa06cbf589ebfb40e37c7d679da72280717aa79ee40a51316d80fbb89264c024f281ff2c234d986301f2ff9d0a7beab1e91d9a780de6d25283af763081a801b428", 0xce}, {&(0x7f00000003c0)="dc9693dda38b5d5ee04421d8d23f1750dd58c3d52c4f3a569f32f99bfd5ddfaac357bc198bc573b0713ddc3bed70970263ce03b1455ffeda8a2d7663ff0c2e8b6dafa3583949700876a71cfa27842be5cc2c304d192ad1e44df546b25d7088d203a02aca0e6b8017452f2625be4217983cea3085579e7eef81de97a0425c74f2c1170fde473ce3b2bf3cd5071fed0fa95fe2acae0dfd50b50b26932b47d0cd424273e53c1bb07f80", 0xa8}, {&(0x7f0000000480)="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", 0xfa}], 0x5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000240)={0x4, 0x9, 0x3, 0x4}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8f7, 0x778, 0x101, 0x2, 0x40, "ef0285e5d58595b51a4e732df58f85ee95b642", 0x80c, 0x3b50}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x260000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x0, 0x5, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "ed388c57f3"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xb, 0x0, 0xe, [0x1000, 0x400, 0x80000000, 0x6, 0xd5e3, 0x2, 0x3, 0x0]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x5, "a976ba"}, {0x2, 0x5, "856f85"}, {0x7, 0xa, "44421d8c7890e91e"}, {0x0, 0x5, "4fa66d"}, {0x5, 0xb, "03d5fe5d0d88a81fe3"}, {0x5, 0x3, '7'}, {0x0, 0x4, "c6fc"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf9, [@broadcast]}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x0, [{@loopback, 0x7}, {@loopback, 0x7}, {@empty, 0x800}, {@local, 0x400000}, {@multicast2, 0x4e192ea4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x193}, {@rand_addr=0x64010100, 0x7fff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20}]}]}}}}}) write$evdev(r2, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) [ 1283.753960][T22413] xt_CT: You must specify a L4 protocol and not use inversions on it 22:46:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x9, 0x0, "f6c984b5b964e0cf91fadfc219d204650ca443"}) r1 = socket$pptp(0x18, 0x1, 0x2) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="3d6e3ac730779143a709e1f4ccaac76d09135ee1e3f5b493987b2a846482dd1cef1b8ef27d1ef8ca6119edac01c16d7107f0ce303f9d95c12015b4947e1c67277ea4a00212dacafa18db0d8ed9660265ab5c20f8c218e459c939d8b1d19b9cfb7e360056559c8318e877f76dc1632d71d437652ae635ae7f1c8e8c7f65b03e4d370815b8ec1cf305c7032e0a5c4097c906721b52234fe56a43d3665f6ae94daa9fc26f721f4dc4eeb79f5765b9661035a4f937a923234e112b3697cc9c95384b49dbb58a0130df232a5b49ca90d20f45", 0xd0}], 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) read(r0, &(0x7f0000000040)=""/95, 0x5f) 22:46:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:44 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x1, 0x50, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="6020164fce286308e4f9be29f2cd2169f563b9314f7e1203abe34d432594edb1dfc6bfa1cf0461b4f5f81190a657944bd4a7ce4c682914cbb4c49d9c62075b1ae570ea6585326b74", 0x0, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000140), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 22:46:44 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x0, 0xffffffffffffffff, r0) move_pages(r1, 0x0, &(0x7f0000000000), &(0x7f0000000100)=[0xfc000000, 0x80, 0x3ff, 0x7f, 0x1ff, 0x2, 0x4, 0x1000], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="8e0f9b63081b28413b07ade935b6b587c06d41ca503e6982ba0d8eff533efda2d0be7df576a4fc3dcaf1995a65f070f05794557b7f0497463fd23e123a7ba958d27232c4", 0x44}], 0x1) 22:46:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28", 0x7}], 0x1) (fail_nth: 1) [ 1284.883226][T22436] FAULT_INJECTION: forcing a failure. [ 1284.883226][T22436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.896866][T22436] CPU: 0 PID: 22436 Comm: syz-executor.1 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1284.907504][T22436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1284.917729][T22436] Call Trace: [ 1284.921230][T22436] [ 1284.924336][T22436] dump_stack_lvl+0x200/0x290 [ 1284.929413][T22436] dump_stack+0x29/0x30 [ 1284.933789][T22436] should_fail_ex+0x9a6/0xa10 [ 1284.938701][T22436] should_fail+0x31/0x40 [ 1284.943163][T22436] should_fail_usercopy+0x3d/0x40 [ 1284.948406][T22436] _copy_from_user+0x66/0x2d0 [ 1284.953270][T22436] iovec_from_user+0x644/0x940 [ 1284.958279][T22436] __import_iovec+0x188/0xaa0 [ 1284.963178][T22436] import_iovec+0x22b/0x250 [ 1284.967882][T22436] vfs_writev+0x177/0x8b0 [ 1284.972403][T22436] ? filter_irq_stacks+0x1d8/0x230 [ 1284.977711][T22436] ? __stack_depot_save+0x25/0x4b0 [ 1284.983071][T22436] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1284.989527][T22436] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1284.995550][T22436] do_writev+0x2d1/0x670 [ 1284.999998][T22436] __x64_sys_writev+0xe9/0x120 [ 1285.004960][T22436] do_syscall_64+0x41/0xc0 [ 1285.009569][T22436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1285.015695][T22436] RIP: 0033:0x7ff8e028c0f9 [ 1285.020386][T22436] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1285.040214][T22436] RSP: 002b:00007ff8e10c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1285.048892][T22436] RAX: ffffffffffffffda RBX: 00007ff8e03abf80 RCX: 00007ff8e028c0f9 [ 1285.057061][T22436] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1285.065192][T22436] RBP: 00007ff8e10c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.073340][T22436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.081469][T22436] R13: 00007ff8e04cfb1f R14: 00007ff8e10c9300 R15: 0000000000022000 [ 1285.089649][T22436] [ 1285.092997][ C0] vkms_vblank_simulate: vblank timer overrun 22:46:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x1) (fail_nth: 1) 22:46:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) (fail_nth: 1) 22:46:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) (fail_nth: 1) 22:46:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28", 0x7}], 0x1) (fail_nth: 2) [ 1285.520412][T22443] FAULT_INJECTION: forcing a failure. [ 1285.520412][T22443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.534429][T22443] CPU: 0 PID: 22443 Comm: syz-executor.3 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1285.545494][T22443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1285.555750][T22443] Call Trace: [ 1285.559169][T22443] [ 1285.562213][T22443] dump_stack_lvl+0x200/0x290 [ 1285.567178][T22443] dump_stack+0x29/0x30 [ 1285.571617][T22443] should_fail_ex+0x9a6/0xa10 [ 1285.576584][T22443] should_fail+0x31/0x40 [ 1285.581066][T22443] should_fail_usercopy+0x3d/0x40 [ 1285.586417][T22443] _copy_to_user+0x65/0x270 [ 1285.591135][T22443] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1285.597219][T22443] simple_read_from_buffer+0x29e/0x440 [ 1285.602999][T22443] proc_fail_nth_read+0x2d4/0x3a0 [ 1285.608372][T22443] ? proc_fault_inject_write+0x520/0x520 [ 1285.614217][T22443] ? proc_fault_inject_write+0x520/0x520 [ 1285.620064][T22443] vfs_read+0x5da/0x1390 [ 1285.624575][T22443] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1285.630730][T22443] ksys_read+0x28f/0x510 [ 1285.635181][T22443] __x64_sys_read+0xdf/0x120 [ 1285.640151][T22443] do_syscall_64+0x41/0xc0 [ 1285.644834][T22443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1285.651058][T22443] RIP: 0033:0x7f8c51c3df1c [ 1285.655714][T22443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1285.675586][T22443] RSP: 002b:00007f8c52906160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1285.684230][T22443] RAX: ffffffffffffffda RBX: 00007f8c51dac050 RCX: 00007f8c51c3df1c [ 1285.692441][T22443] RDX: 000000000000000f RSI: 00007f8c529061e0 RDI: 0000000000000004 [ 1285.700559][T22443] RBP: 00007f8c529061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.708778][T22443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.716894][T22443] R13: 00007f8c51ecfb1f R14: 00007f8c52906300 R15: 0000000000022000 [ 1285.725028][T22443] [ 1285.728313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.861416][T22449] FAULT_INJECTION: forcing a failure. [ 1285.861416][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.875907][T22449] CPU: 1 PID: 22449 Comm: syz-executor.5 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1285.886640][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1285.891226][T22450] FAULT_INJECTION: forcing a failure. [ 1285.891226][T22450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.896824][T22449] Call Trace: [ 1285.896880][T22449] [ 1285.896924][T22449] dump_stack_lvl+0x200/0x290 [ 1285.897107][T22449] dump_stack+0x29/0x30 [ 1285.925873][T22449] should_fail_ex+0x9a6/0xa10 [ 1285.930846][T22449] should_fail+0x31/0x40 [ 1285.935335][T22449] should_fail_usercopy+0x3d/0x40 [ 1285.940722][T22449] _copy_from_user+0x66/0x2d0 [ 1285.945778][T22449] iovec_from_user+0x644/0x940 [ 1285.950858][T22449] __import_iovec+0x188/0xaa0 [ 1285.955944][T22449] import_iovec+0x22b/0x250 [ 1285.960729][T22449] vfs_writev+0x177/0x8b0 [ 1285.965296][T22449] ? filter_irq_stacks+0x1d8/0x230 [ 1285.970830][T22449] ? __stack_depot_save+0x25/0x4b0 [ 1285.976198][T22449] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1285.982741][T22449] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1285.988832][T22449] do_writev+0x2d1/0x670 [ 1285.993313][T22449] __x64_sys_writev+0xe9/0x120 [ 1285.998392][T22449] do_syscall_64+0x41/0xc0 [ 1286.003057][T22449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1286.009251][T22449] RIP: 0033:0x7f5d9ea8c0f9 [ 1286.013861][T22449] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1286.033817][T22449] RSP: 002b:00007f5d9f7d2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1286.042483][T22449] RAX: ffffffffffffffda RBX: 00007f5d9ebabf80 RCX: 00007f5d9ea8c0f9 [ 1286.050745][T22449] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1286.058909][T22449] RBP: 00007f5d9f7d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.067065][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.075228][T22449] R13: 00007f5d9eccfb1f R14: 00007f5d9f7d2300 R15: 0000000000022000 [ 1286.083419][T22449] [ 1286.086596][T22450] CPU: 0 PID: 22450 Comm: syz-executor.4 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1286.097306][T22450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1286.107570][T22450] Call Trace: [ 1286.111030][T22450] [ 1286.114096][T22450] dump_stack_lvl+0x200/0x290 [ 1286.119323][T22450] dump_stack+0x29/0x30 [ 1286.123676][T22450] should_fail_ex+0x9a6/0xa10 [ 1286.128573][T22450] should_fail+0x31/0x40 [ 1286.133042][T22450] should_fail_usercopy+0x3d/0x40 [ 1286.138306][T22450] _copy_from_user+0x66/0x2d0 [ 1286.143192][T22450] iovec_from_user+0x644/0x940 [ 1286.148179][T22450] __import_iovec+0x188/0xaa0 [ 1286.153216][T22450] import_iovec+0x22b/0x250 [ 1286.158017][T22450] vfs_writev+0x177/0x8b0 [ 1286.162533][T22450] ? filter_irq_stacks+0x1d8/0x230 [ 1286.167857][T22450] ? __stack_depot_save+0x25/0x4b0 [ 1286.173165][T22450] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1286.179633][T22450] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1286.185801][T22450] do_writev+0x2d1/0x670 [ 1286.190269][T22450] __x64_sys_writev+0xe9/0x120 [ 1286.195346][T22450] do_syscall_64+0x41/0xc0 [ 1286.199971][T22450] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1286.206119][T22450] RIP: 0033:0x7f9963e8c0f9 [ 1286.210680][T22450] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1286.230481][T22450] RSP: 002b:00007f9964bd6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1286.239091][T22450] RAX: ffffffffffffffda RBX: 00007f9963fabf80 RCX: 00007f9963e8c0f9 [ 1286.247241][T22450] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1286.255378][T22450] RBP: 00007f9964bd61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.263538][T22450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.271650][T22450] R13: 00007f99640cfb1f R14: 00007f9964bd6300 R15: 0000000000022000 [ 1286.279811][T22450] [ 1286.283118][ C0] vkms_vblank_simulate: vblank timer overrun 22:46:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) (fail_nth: 2) 22:46:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x1) 22:46:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) (fail_nth: 2) [ 1286.784317][T22458] FAULT_INJECTION: forcing a failure. [ 1286.784317][T22458] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.797428][T22458] CPU: 0 PID: 22458 Comm: syz-executor.4 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1286.808228][T22458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1286.818538][T22458] Call Trace: [ 1286.822005][T22458] [ 1286.825117][T22458] dump_stack_lvl+0x200/0x290 [ 1286.830157][T22458] dump_stack+0x29/0x30 [ 1286.834631][T22458] should_fail_ex+0x9a6/0xa10 [ 1286.839655][T22458] __should_failslab+0x253/0x2e0 [ 1286.844939][T22458] should_failslab+0x2d/0x70 [ 1286.849829][T22458] slab_pre_alloc_hook+0x138/0xb60 [ 1286.855244][T22458] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1286.861485][T22458] __kmem_cache_alloc_node+0x150/0xac0 [ 1286.867239][T22458] ? kvmalloc_node+0x1b7/0x4c0 [ 1286.872306][T22458] ? __kernel_text_address+0x36/0xf0 [ 1286.877903][T22458] __kmalloc_node+0x398/0x6c0 [ 1286.882887][T22458] ? kvmalloc_node+0x1b7/0x4c0 [ 1286.887938][T22458] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1286.894530][T22458] kvmalloc_node+0x1b7/0x4c0 [ 1286.899435][T22458] file_tty_write+0x530/0x1410 [ 1286.904559][T22458] ? n_tty_read+0x3c40/0x3c40 [ 1286.909464][T22458] ? filter_irq_stacks+0xb9/0x230 [ 1286.914755][T22458] tty_write+0x98/0xc0 [ 1286.919074][T22458] ? file_tty_write+0x1410/0x1410 [ 1286.924354][T22458] do_iter_write+0x101d/0x1800 [ 1286.929380][T22458] vfs_writev+0x420/0x8b0 [ 1286.933929][T22458] ? filter_irq_stacks+0xb9/0x230 [ 1286.939297][T22458] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1286.945806][T22458] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1286.951894][T22458] do_writev+0x2d1/0x670 [ 1286.956398][T22458] __x64_sys_writev+0xe9/0x120 [ 1286.961484][T22458] do_syscall_64+0x41/0xc0 [ 1286.966147][T22458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1286.972413][T22458] RIP: 0033:0x7f9963e8c0f9 [ 1286.977041][T22458] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1286.996891][T22458] RSP: 002b:00007f9964bd6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.005553][T22458] RAX: ffffffffffffffda RBX: 00007f9963fabf80 RCX: 00007f9963e8c0f9 [ 1287.013731][T22458] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1287.021916][T22458] RBP: 00007f9964bd61d0 R08: 0000000000000000 R09: 0000000000000000 22:46:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="fc0e9b47", 0x4}], 0x1) 22:46:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1287.030207][T22458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.038376][T22458] R13: 00007f99640cfb1f R14: 00007f9964bd6300 R15: 0000000000022000 [ 1287.046580][T22458] [ 1287.050027][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.110294][T22462] FAULT_INJECTION: forcing a failure. [ 1287.110294][T22462] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.123720][T22462] CPU: 0 PID: 22462 Comm: syz-executor.5 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1287.134320][T22462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1287.144515][T22462] Call Trace: [ 1287.147918][T22462] [ 1287.150956][T22462] dump_stack_lvl+0x200/0x290 [ 1287.155855][T22462] dump_stack+0x29/0x30 [ 1287.160231][T22462] should_fail_ex+0x9a6/0xa10 [ 1287.165164][T22462] __should_failslab+0x253/0x2e0 [ 1287.170319][T22462] should_failslab+0x2d/0x70 [ 1287.175198][T22462] slab_pre_alloc_hook+0x138/0xb60 [ 1287.180664][T22462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1287.186820][T22462] __kmem_cache_alloc_node+0x150/0xac0 [ 1287.192482][T22462] ? kvmalloc_node+0x1b7/0x4c0 [ 1287.197470][T22462] ? __kernel_text_address+0x36/0xf0 [ 1287.203079][T22462] __kmalloc_node+0x398/0x6c0 [ 1287.208056][T22462] ? kvmalloc_node+0x1b7/0x4c0 [ 1287.213204][T22462] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1287.219792][T22462] kvmalloc_node+0x1b7/0x4c0 [ 1287.224662][T22462] file_tty_write+0x530/0x1410 [ 1287.229737][T22462] ? n_tty_read+0x3c40/0x3c40 [ 1287.234591][T22462] ? filter_irq_stacks+0xb9/0x230 [ 1287.239824][T22462] tty_write+0x98/0xc0 [ 1287.244082][T22462] ? file_tty_write+0x1410/0x1410 [ 1287.249295][T22462] do_iter_write+0x101d/0x1800 [ 1287.254253][T22462] vfs_writev+0x420/0x8b0 [ 1287.258756][T22462] ? filter_irq_stacks+0x1d8/0x230 [ 1287.264069][T22462] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1287.270516][T22462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1287.276540][T22462] do_writev+0x2d1/0x670 [ 1287.281011][T22462] __x64_sys_writev+0xe9/0x120 [ 1287.286058][T22462] do_syscall_64+0x41/0xc0 [ 1287.290671][T22462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1287.296798][T22462] RIP: 0033:0x7f5d9ea8c0f9 [ 1287.301453][T22462] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1287.321346][T22462] RSP: 002b:00007f5d9f7d2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.329961][T22462] RAX: ffffffffffffffda RBX: 00007f5d9ebabf80 RCX: 00007f5d9ea8c0f9 [ 1287.338084][T22462] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1287.346226][T22462] RBP: 00007f5d9f7d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.354352][T22462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.362563][T22462] R13: 00007f5d9eccfb1f R14: 00007f5d9f7d2300 R15: 0000000000022000 [ 1287.370988][T22462] [ 1287.374136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.398996][T22460] FAULT_INJECTION: forcing a failure. [ 1287.398996][T22460] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.412321][T22460] CPU: 1 PID: 22460 Comm: syz-executor.1 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1287.423070][T22460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1287.433324][T22460] Call Trace: [ 1287.436767][T22460] [ 1287.439900][T22460] dump_stack_lvl+0x200/0x290 [ 1287.444944][T22460] dump_stack+0x29/0x30 [ 1287.449437][T22460] should_fail_ex+0x9a6/0xa10 [ 1287.454397][T22460] __should_failslab+0x253/0x2e0 [ 1287.459699][T22460] should_failslab+0x2d/0x70 [ 1287.464534][T22460] slab_pre_alloc_hook+0x138/0xb60 [ 1287.469995][T22460] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1287.476109][T22460] __kmem_cache_alloc_node+0x150/0xac0 [ 1287.481850][T22460] ? kvmalloc_node+0x1b7/0x4c0 [ 1287.486923][T22460] __kmalloc_node+0x398/0x6c0 [ 1287.491883][T22460] ? kvmalloc_node+0x1b7/0x4c0 [ 1287.496935][T22460] kvmalloc_node+0x1b7/0x4c0 [ 1287.501805][T22460] file_tty_write+0x530/0x1410 [ 1287.506834][T22460] ? n_tty_read+0x3c40/0x3c40 [ 1287.511715][T22460] ? filter_irq_stacks+0xb9/0x230 [ 1287.517027][T22460] tty_write+0x98/0xc0 [ 1287.521351][T22460] ? file_tty_write+0x1410/0x1410 [ 1287.526630][T22460] do_iter_write+0x101d/0x1800 [ 1287.531664][T22460] vfs_writev+0x420/0x8b0 [ 1287.536240][T22460] ? filter_irq_stacks+0x1d8/0x230 [ 1287.541595][T22460] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1287.548129][T22460] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1287.554304][T22460] do_writev+0x2d1/0x670 [ 1287.558798][T22460] __x64_sys_writev+0xe9/0x120 [ 1287.563827][T22460] do_syscall_64+0x41/0xc0 [ 1287.568494][T22460] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1287.574658][T22460] RIP: 0033:0x7ff8e028c0f9 [ 1287.579261][T22460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1287.599105][T22460] RSP: 002b:00007ff8e10c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.607774][T22460] RAX: ffffffffffffffda RBX: 00007ff8e03abf80 RCX: 00007ff8e028c0f9 [ 1287.615943][T22460] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1287.624100][T22460] RBP: 00007ff8e10c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.632343][T22460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.640497][T22460] R13: 00007ff8e04cfb1f R14: 00007ff8e10c9300 R15: 0000000000022000 [ 1287.648682][T22460] 22:46:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) (fail_nth: 3) 22:46:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) (fail_nth: 3) [ 1288.398294][T22472] FAULT_INJECTION: forcing a failure. [ 1288.398294][T22472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.416260][T22472] CPU: 1 PID: 22472 Comm: syz-executor.5 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1288.427072][T22472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1288.437450][T22472] Call Trace: [ 1288.440911][T22472] [ 1288.444027][T22472] dump_stack_lvl+0x200/0x290 22:46:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f0000005440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1288.449024][T22472] dump_stack+0x29/0x30 [ 1288.453478][T22472] should_fail_ex+0x9a6/0xa10 [ 1288.458490][T22472] should_fail+0x31/0x40 [ 1288.463047][T22472] should_fail_usercopy+0x3d/0x40 [ 1288.468388][T22472] copyin+0x61/0x250 [ 1288.472576][T22472] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1288.478715][T22472] _copy_from_iter+0x6a4/0x2440 [ 1288.483861][T22472] ? __kmalloc_node+0x3c9/0x6c0 [ 1288.489039][T22472] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1288.495171][T22472] file_tty_write+0x8f2/0x1410 [ 1288.500208][T22472] ? n_tty_read+0x3c40/0x3c40 [ 1288.505134][T22472] tty_write+0x98/0xc0 [ 1288.509457][T22472] ? file_tty_write+0x1410/0x1410 [ 1288.514760][T22472] do_iter_write+0x101d/0x1800 [ 1288.519779][T22472] vfs_writev+0x420/0x8b0 [ 1288.524330][T22472] ? filter_irq_stacks+0x1d8/0x230 [ 1288.529698][T22472] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1288.536209][T22472] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1288.542399][T22472] do_writev+0x2d1/0x670 [ 1288.546882][T22472] __x64_sys_writev+0xe9/0x120 [ 1288.551873][T22472] do_syscall_64+0x41/0xc0 [ 1288.556534][T22472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1288.562692][T22472] RIP: 0033:0x7f5d9ea8c0f9 [ 1288.567553][T22472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1288.587393][T22472] RSP: 002b:00007f5d9f7d2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1288.596049][T22472] RAX: ffffffffffffffda RBX: 00007f5d9ebabf80 RCX: 00007f5d9ea8c0f9 [ 1288.604220][T22472] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1288.612388][T22472] RBP: 00007f5d9f7d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.620557][T22472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.628713][T22472] R13: 00007f5d9eccfb1f R14: 00007f5d9f7d2300 R15: 0000000000022000 [ 1288.636897][T22472] 22:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28", 0x7}], 0x1) (fail_nth: 3) 22:46:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) 22:46:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e079b47", 0x4}], 0x1) [ 1288.960995][T22482] FAULT_INJECTION: forcing a failure. [ 1288.960995][T22482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.974828][T22482] CPU: 0 PID: 22482 Comm: syz-executor.1 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1288.985534][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1288.995920][T22482] Call Trace: [ 1288.999555][T22482] [ 1289.002666][T22482] dump_stack_lvl+0x200/0x290 [ 1289.007676][T22482] dump_stack+0x29/0x30 [ 1289.012133][T22482] should_fail_ex+0x9a6/0xa10 [ 1289.017143][T22482] should_fail+0x31/0x40 [ 1289.021690][T22482] should_fail_usercopy+0x3d/0x40 [ 1289.027047][T22482] _copy_to_user+0x65/0x270 [ 1289.031856][T22482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1289.038009][T22482] simple_read_from_buffer+0x29e/0x440 [ 1289.043764][T22482] proc_fail_nth_read+0x2d4/0x3a0 [ 1289.049098][T22482] ? proc_fault_inject_write+0x520/0x520 [ 1289.055029][T22482] ? proc_fault_inject_write+0x520/0x520 [ 1289.060955][T22482] vfs_read+0x5da/0x1390 [ 1289.065684][T22482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1289.071818][T22482] ksys_read+0x28f/0x510 [ 1289.076330][T22482] __x64_sys_read+0xdf/0x120 [ 1289.081277][T22482] do_syscall_64+0x41/0xc0 [ 1289.086002][T22482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1289.092323][T22482] RIP: 0033:0x7ff8e023df1c [ 1289.096958][T22482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1289.116828][T22482] RSP: 002b:00007ff8e10c9160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1289.125617][T22482] RAX: ffffffffffffffda RBX: 00007ff8e03abf80 RCX: 00007ff8e023df1c [ 1289.133813][T22482] RDX: 000000000000000f RSI: 00007ff8e10c91e0 RDI: 0000000000000004 [ 1289.142120][T22482] RBP: 00007ff8e10c91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.150380][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:46:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) (fail_nth: 4) [ 1289.158660][T22482] R13: 00007ff8e04cfb1f R14: 00007ff8e10c9300 R15: 0000000000022000 [ 1289.166864][T22482] [ 1289.170056][ C0] vkms_vblank_simulate: vblank timer overrun 22:46:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="9b0e9b65", 0x4}], 0x1) 22:46:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63081b28", 0x7}], 0x1) 22:46:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e089b47", 0x4}], 0x1) 22:46:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="fc0e9b65", 0x4}], 0x1) [ 1289.812632][T22495] FAULT_INJECTION: forcing a failure. [ 1289.812632][T22495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.826784][T22495] CPU: 0 PID: 22495 Comm: syz-executor.5 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1289.837487][T22495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1289.847859][T22495] Call Trace: [ 1289.851319][T22495] [ 1289.854568][T22495] dump_stack_lvl+0x200/0x290 22:46:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e099b47", 0x4}], 0x1) [ 1289.859446][T22495] dump_stack+0x29/0x30 [ 1289.863901][T22495] should_fail_ex+0x9a6/0xa10 [ 1289.868802][T22495] should_fail+0x31/0x40 [ 1289.873232][T22495] should_fail_usercopy+0x3d/0x40 [ 1289.878454][T22495] _copy_to_user+0x65/0x270 [ 1289.883174][T22495] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1289.889332][T22495] simple_read_from_buffer+0x29e/0x440 [ 1289.895178][T22495] proc_fail_nth_read+0x2d4/0x3a0 [ 1289.895351][T22495] ? proc_fault_inject_write+0x520/0x520 22:46:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1289.895502][T22495] ? proc_fault_inject_write+0x520/0x520 [ 1289.895667][T22495] vfs_read+0x5da/0x1390 [ 1289.895879][T22495] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1289.896076][T22495] ksys_read+0x28f/0x510 [ 1289.896220][T22495] __x64_sys_read+0xdf/0x120 [ 1289.896363][T22495] do_syscall_64+0x41/0xc0 [ 1289.896536][T22495] entry_SYSCALL_64_after_hwframe+0x63/0xcd 22:46:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) [ 1289.896730][T22495] RIP: 0033:0x7f5d9ea3df1c [ 1289.896833][T22495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 22:46:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1289.896954][T22495] RSP: 002b:00007f5d9f7d2160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1289.897090][T22495] RAX: ffffffffffffffda RBX: 00007f5d9ebabf80 RCX: 00007f5d9ea3df1c [ 1289.897191][T22495] RDX: 000000000000000f RSI: 00007f5d9f7d21e0 RDI: 0000000000000004 [ 1289.897279][T22495] RBP: 00007f5d9f7d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.897373][T22495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:46:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1289.897458][T22495] R13: 00007f5d9eccfb1f R14: 00007f5d9f7d2300 R15: 0000000000022000 [ 1289.897578][T22495] 22:46:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e079b65", 0x4}], 0x1) 22:46:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0a9b47", 0x4}], 0x1) 22:46:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="9b0e9b60", 0x4}], 0x1) 22:46:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="9b0e9b63081b28", 0x7}], 0x1) 22:46:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e089b65", 0x4}], 0x1) 22:46:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003500000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0b9b47", 0x4}], 0x1) 22:46:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="fc0e9b60", 0x4}], 0x1) 22:46:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="fc0e9b63081b28", 0x7}], 0x1) 22:46:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e099b65", 0x4}], 0x1) 22:46:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003600000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0c9b47", 0x4}], 0x1) 22:46:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e079b60", 0x4}], 0x1) 22:46:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e079b63081b28", 0x7}], 0x1) 22:46:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0a9b65", 0x4}], 0x1) 22:46:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0d9b47", 0x4}], 0x1) 22:46:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e089b60", 0x4}], 0x1) 22:46:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0b9b65", 0x4}], 0x1) 22:46:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e089b63081b28", 0x7}], 0x1) 22:46:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0f9b47", 0x4}], 0x1) 22:46:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0c9b65", 0x4}], 0x1) 22:46:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e099b60", 0x4}], 0x1) 22:46:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e189b47", 0x4}], 0x1) 22:46:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e099b63081b28", 0x7}], 0x1) 22:46:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800), 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0a9b60", 0x4}], 0x1) 22:46:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0a9b63081b28", 0x7}], 0x1) 22:46:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0d9b65", 0x4}], 0x1) 22:46:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1a9b47", 0x4}], 0x1) 22:46:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0b9b60", 0x4}], 0x1) 22:46:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0b9b63081b28", 0x7}], 0x1) 22:46:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1b9b47", 0x4}], 0x1) 22:46:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0f9b65", 0x4}], 0x1) 22:46:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e189b65", 0x4}], 0x1) 22:46:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800), 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006b00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0c9b60", 0x4}], 0x1) 22:46:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1a9b65", 0x4}], 0x1) 22:46:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0c9b63081b28", 0x7}], 0x1) 22:46:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8efc9b47", 0x4}], 0x1) 22:46:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007200000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0d9b60", 0x4}], 0x1) 22:46:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b07", 0x4}], 0x1) 22:46:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1b9b65", 0x4}], 0x1) 22:46:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0d9b63081b28", 0x7}], 0x1) 22:46:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007a00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800), 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0f9b60", 0x4}], 0x1) 22:46:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0f9b63081b28", 0x7}], 0x1) 22:46:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8efc9b65", 0x4}], 0x1) 22:46:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b08", 0x4}], 0x1) 22:46:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e189b60", 0x4}], 0x1) 22:46:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e109b63081b28", 0x7}], 0x1) 22:46:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b09", 0x4}], 0x1) 22:46:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b07", 0x4}], 0x1) 22:46:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e189b63081b28", 0x7}], 0x1) 22:46:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1a9b60", 0x4}], 0x1) 22:46:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000005580)}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b08", 0x4}], 0x1) 22:46:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000099ffffff08000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0a", 0x4}], 0x1) 22:46:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1b9b60", 0x4}], 0x1) 22:46:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1a9b63081b28", 0x7}], 0x1) 22:46:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0b", 0x4}], 0x1) 22:46:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000001000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b09", 0x4}], 0x1) 22:46:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8efc9b60", 0x4}], 0x1) 22:46:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e1b9b63081b28", 0x7}], 0x1) [ 1297.461459][T22690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 22:46:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000004000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1297.989181][T22698] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:46:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0a", 0x4}], 0x1) 22:46:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0c", 0x4}], 0x1) 22:46:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b07", 0x4}], 0x1) 22:46:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8efc9b63081b28", 0x7}], 0x1) 22:46:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000005000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) [ 1298.363671][T22706] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:46:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000006000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0b", 0x4}], 0x1) 22:46:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b08", 0x4}], 0x1) 22:46:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0d", 0x4}], 0x1) 22:46:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b07081b28", 0x7}], 0x1) 22:46:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0e", 0x4}], 0x1) [ 1298.924656][T22720] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:46:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:46:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b09", 0x4}], 0x1) 22:46:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0c", 0x4}], 0x1) 22:46:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003902000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b08081b28", 0x7}], 0x1) 22:46:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0f", 0x4}], 0x1) 22:46:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003903000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:46:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b09081b28", 0x7}], 0x1) 22:46:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0a", 0x4}], 0x1) 22:46:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b18", 0x4}], 0x1) 22:46:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0d", 0x4}], 0x1) 22:47:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0a081b28", 0x7}], 0x1) 22:47:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003904000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0e", 0x4}], 0x1) 22:47:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1a", 0x4}], 0x1) 22:47:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0b", 0x4}], 0x1) 22:47:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0b081b28", 0x7}], 0x1) 22:47:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0f", 0x4}], 0x1) 22:47:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003905000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1b", 0x4}], 0x1) 22:47:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0c", 0x4}], 0x1) 22:47:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0c081b28", 0x7}], 0x1) 22:47:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b18", 0x4}], 0x1) 22:47:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3b", 0x4}], 0x1) 22:47:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0d", 0x4}], 0x1) 22:47:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003906000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0d081b28", 0x7}], 0x1) 22:47:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1a", 0x4}], 0x1) 22:47:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003907000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0e", 0x4}], 0x1) 22:47:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3c", 0x4}], 0x1) 22:47:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1b", 0x4}], 0x1) 22:47:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0e081b28", 0x7}], 0x1) 22:47:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3b", 0x4}], 0x1) 22:47:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003908000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0f", 0x4}], 0x1) 22:47:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3d", 0x4}], 0x1) 22:47:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b0f081b28", 0x7}], 0x1) 22:47:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3c", 0x4}], 0x1) 22:47:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3d", 0x4}], 0x1) 22:47:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}], 0x1) 22:47:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b18", 0x4}], 0x1) 22:47:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003909000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b18081b28", 0x7}], 0x1) 22:47:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1a", 0x4}], 0x1) 22:47:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}], 0x1) 22:47:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b41", 0x4}], 0x1) 22:47:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000390f000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1a081b28", 0x7}], 0x1) 22:47:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1b", 0x4}], 0x1) 22:47:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b41", 0x4}], 0x1) 22:47:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b42", 0x4}], 0x1) 22:47:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b1b081b28", 0x7}], 0x1) 22:47:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003960000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3b", 0x4}], 0x1) 22:47:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b43", 0x4}], 0x1) 22:47:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b42", 0x4}], 0x1) 22:47:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900030008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3c", 0x4}], 0x1) 22:47:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b23081b28", 0x7}], 0x1) 22:47:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) 22:47:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b45", 0x4}], 0x1) 22:47:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3d", 0x4}], 0x1) 22:47:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900050008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b25081b28", 0x7}], 0x1) 22:47:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b43", 0x4}], 0x1) 22:47:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e", 0x4}], 0x1) 22:47:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b2a081b28", 0x7}], 0x1) 22:47:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) 22:47:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000390e050008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b46", 0x4}], 0x1) 22:47:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b41", 0x4}], 0x1) 22:47:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b45", 0x4}], 0x1) 22:47:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b2b081b28", 0x7}], 0x1) 22:47:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b48", 0x4}], 0x1) 22:47:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b42", 0x4}], 0x1) 22:47:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900060008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b46", 0x4}], 0x1) 22:47:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b2d081b28", 0x7}], 0x1) 22:47:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4a", 0x4}], 0x1) 22:47:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b43", 0x4}], 0x1) 22:47:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900070008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x1) 22:47:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4b", 0x4}], 0x1) 22:47:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900090008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b2e081b28", 0x7}], 0x1) 22:47:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44", 0x4}], 0x1) 22:47:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b48", 0x4}], 0x1) 22:47:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b30081b28", 0x7}], 0x1) 22:47:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4c", 0x4}], 0x1) 22:47:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039050e0008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4a", 0x4}], 0x1) 22:47:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b45", 0x4}], 0x1) 22:47:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3b081b28", 0x7}], 0x1) 22:47:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4b", 0x4}], 0x1) 22:47:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b46", 0x4}], 0x1) 22:47:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039000f0008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3c081b28", 0x7}], 0x1) 22:47:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4d", 0x4}], 0x1) 22:47:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4c", 0x4}], 0x1) 22:47:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3d081b28", 0x7}], 0x1) 22:47:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x1) 22:47:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900600008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b50", 0x4}], 0x1) 22:47:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4d", 0x4}], 0x1) 22:47:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b58", 0x4}], 0x1) 22:47:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b48", 0x4}], 0x1) 22:47:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b50", 0x4}], 0x1) 22:47:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b3e081b28", 0x7}], 0x1) 22:47:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000009000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b41081b28", 0x7}], 0x1) [ 1309.919200][T23012] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5b", 0x4}], 0x1) 22:47:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4a", 0x4}], 0x1) 22:47:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b58", 0x4}], 0x1) 22:47:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b42081b28", 0x7}], 0x1) 22:47:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000390000000a000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5d", 0x4}], 0x1) 22:47:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5b", 0x4}], 0x1) 22:47:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4b", 0x4}], 0x1) [ 1310.438013][T23027] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b43081b28", 0x7}], 0x1) 22:47:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000390000000b000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5d", 0x4}], 0x1) 22:47:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) 22:47:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x4}], 0x1) 22:47:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4c", 0x4}], 0x1) [ 1310.989165][T23043] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b44081b28", 0x7}], 0x1) 22:47:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000010000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b61", 0x4}], 0x1) 22:47:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b61", 0x4}], 0x1) 22:47:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4d", 0x4}], 0x1) 22:47:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b45081b28", 0x7}], 0x1) [ 1311.597113][T23060] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1311.597193][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:47:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b50", 0x4}], 0x1) 22:47:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:47:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:47:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000011000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b58", 0x4}], 0x1) 22:47:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b46081b28", 0x7}], 0x1) 22:47:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b64", 0x4}], 0x1) [ 1312.133627][T23076] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1312.142282][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:47:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b64", 0x4}], 0x1) 22:47:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5b", 0x4}], 0x1) 22:47:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000013000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47081b28", 0x7}], 0x1) 22:47:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) 22:47:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b66", 0x4}], 0x1) [ 1312.624281][T23093] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1312.633271][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:47:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000018000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b48081b28", 0x7}], 0x1) 22:47:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5d", 0x4}], 0x1) 22:47:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b66", 0x4}], 0x1) 22:47:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b67", 0x4}], 0x1) [ 1313.138606][T23102] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b61", 0x4}], 0x1) 22:47:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b67", 0x4}], 0x1) 22:47:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4a081b28", 0x7}], 0x1) 22:47:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000039000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b68", 0x4}], 0x1) 22:47:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6c", 0x4}], 0x1) 22:47:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b63", 0x4}], 0x1) 22:47:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b68", 0x4}], 0x1) 22:47:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4b081b28", 0x7}], 0x1) 22:47:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900020008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6d", 0x4}], 0x1) 22:47:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b64", 0x4}], 0x1) 22:47:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4c081b28", 0x7}], 0x1) 22:47:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6c", 0x4}], 0x1) 22:47:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900030008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6e", 0x4}], 0x1) 22:47:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x1) 22:47:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6d", 0x4}], 0x1) 22:47:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b4d081b28", 0x7}], 0x1) 22:47:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900040008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b66", 0x4}], 0x1) 22:47:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b71", 0x4}], 0x1) 22:47:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b50081b28", 0x7}], 0x1) 22:47:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6e", 0x4}], 0x1) 22:47:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b67", 0x4}], 0x1) 22:47:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900050008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b72", 0x4}], 0x1) 22:47:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b58081b28", 0x7}], 0x1) 22:47:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b71", 0x4}], 0x1) 22:47:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b68", 0x4}], 0x1) 22:47:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900060008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b72", 0x4}], 0x1) 22:47:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5b081b28", 0x7}], 0x1) 22:47:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b73", 0x4}], 0x1) 22:47:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6c", 0x4}], 0x1) 22:47:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900070008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b73", 0x4}], 0x1) 22:47:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b75", 0x4}], 0x1) 22:47:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b75", 0x4}], 0x1) 22:47:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6d", 0x4}], 0x1) 22:47:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b5d081b28", 0x7}], 0x1) 22:47:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900080008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b9b", 0x4}], 0x1) 22:47:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6e", 0x4}], 0x1) 22:47:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900090008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b9b", 0x4}], 0x1) 22:47:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60081b28", 0x7}], 0x1) 22:47:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x2}], 0x1) 22:47:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x3}], 0x1) 22:47:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b61081b28", 0x7}], 0x1) 22:47:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x2}], 0x1) 22:47:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b71", 0x4}], 0x1) 22:47:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039000f0008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b64081b28", 0x7}], 0x1) 22:47:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x10}], 0x1) 22:47:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x3}], 0x1) 22:47:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900600008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b72", 0x4}], 0x1) 22:47:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x110}], 0x1) 22:47:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65081b28", 0x7}], 0x1) 22:47:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b73", 0x4}], 0x1) 22:47:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x10}], 0x1) 22:47:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000308000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b66081b28", 0x7}], 0x1) 22:47:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000508000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b75", 0x4}], 0x1) 22:47:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0xfdef}], 0x1) 22:47:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x110}], 0x1) 22:47:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b67081b28", 0x7}], 0x1) 22:47:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039000e0508000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000608000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x7ffff000}], 0x1) 22:47:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9bc0", 0x4}], 0x1) 22:47:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0xfdef}], 0x1) 22:47:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000708000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b68081b28", 0x7}], 0x1) 22:47:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000908000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9be0", 0x4}], 0x1) 22:47:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0xfffffdef}], 0x1) 22:47:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900050e08000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b69081b28", 0x7}], 0x1) 22:47:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x7ffff000}], 0x1) 22:47:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000f08000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9bf0", 0x4}], 0x1) 22:47:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900006008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x7ffffffff000}], 0x1) 22:47:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6c081b28", 0x7}], 0x1) 22:47:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9bf8", 0x4}], 0x1) 22:47:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0xfffffdef}], 0x1) 22:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000005000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0xfffffffffffffdef}], 0x1) 22:47:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6d081b28", 0x7}], 0x1) 22:47:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9bfc", 0x4}], 0x1) [ 1323.772987][T23350] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000006000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x2) [ 1324.372899][T23365] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 22:47:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000208000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x4) 22:47:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x7ffffffff000}], 0x1) 22:47:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6e081b28", 0x7}], 0x1) 22:47:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b9b", 0x4}], 0x1) 22:47:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffe97, 0x0) r0 = open(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_clone(0xc002180, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00, 0x0, 0xee00}, 0xc5b, 0x0, 0x6, 0x0, 0x0, r1, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b86b008ed80fc79b08000080b9800000c00f3235001000000f30c4c25d9dad00800000b95a0900000f32c4c109e5d166f30f093e2e0f01d166baf80cb8dc83858fef66bafc0c66edb805000000b9080000800f01d9", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:47:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000308000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x8) 22:47:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x2}], 0x1) 22:47:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0xfffffffffffffdef}], 0x1) 22:47:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b6f081b28", 0x7}], 0x1) 22:47:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x2) 22:47:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b65", 0x4}], 0x9) 22:47:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000408000300", @ANYRES32=r2, @ANYBLOB="10005a800c00001c"], 0x2c}}, 0x0) 22:47:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b60", 0x3}], 0x1) 22:47:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b70081b28", 0x7}], 0x1) 22:47:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="8e0e9b47", 0x4}], 0x4) [ 1326.162226][ C1] ===================================================== [ 1326.169478][ C1] BUG: KMSAN: uninit-value in native_apic_mem_write+0x72/0x90 [ 1326.177077][ C1] native_apic_mem_write+0x72/0x90 [ 1326.182351][ C1] sysvec_reschedule_ipi+0x35/0x120 [ 1326.187707][ C1] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 1326.193517][ C1] kmsan_get_metadata+0x1f1/0x2c0 [ 1326.198784][ C1] kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.204602][ C1] __msan_metadata_ptr_for_store_4+0x27/0x40 [ 1326.210756][ C1] __copy_skb_header+0x24d/0xac0 [ 1326.215861][ C1] __skb_clone+0xa2/0xa40 [ 1326.220551][ C1] skb_clone+0x4a9/0x670 [ 1326.224967][ C1] hsr_create_tagged_frame+0x6f8/0x12f0 [ 1326.230742][ C1] hsr_forward_skb+0x22aa/0x3820 [ 1326.235884][ C1] send_hsr_supervision_frame+0x920/0xe20 [ 1326.241805][ C1] hsr_announce+0x100/0x2a0 [ 1326.246480][ C1] call_timer_fn+0x8d/0x580 [ 1326.251317][ C1] __run_timers+0x94f/0x11c0 [ 1326.256060][ C1] run_timer_softirq+0x75/0xf0 [ 1326.261011][ C1] __do_softirq+0x211/0x818 [ 1326.265728][ C1] __irq_exit_rcu+0x117/0x260 [ 1326.270651][ C1] irq_exit_rcu+0x12/0x20 [ 1326.275142][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1326.280920][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1326.287114][ C1] acpi_idle_enter+0x746/0x8e0 [ 1326.292035][ C1] cpuidle_enter_state+0x98d/0x1c80 [ 1326.297529][ C1] cpuidle_enter+0xf8/0x180 [ 1326.302245][ C1] do_idle+0x66f/0x810 [ 1326.306565][ C1] cpu_startup_entry+0x40/0x50 [ 1326.311592][ C1] start_secondary+0x116/0x120 [ 1326.316859][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1326.322922][ C1] [ 1326.325322][ C1] Uninit was created at: [ 1326.329758][ C1] slab_post_alloc_hook+0x271/0xf70 [ 1326.335139][ C1] kmem_cache_alloc+0x586/0xb40 [ 1326.340125][ C1] skb_clone+0x3ec/0x670 [ 1326.344534][ C1] hsr_create_tagged_frame+0x6f8/0x12f0 [ 1326.350238][ C1] hsr_forward_skb+0x22aa/0x3820 [ 1326.355327][ C1] send_hsr_supervision_frame+0x920/0xe20 [ 1326.361206][ C1] hsr_announce+0x100/0x2a0 [ 1326.365869][ C1] call_timer_fn+0x8d/0x580 [ 1326.370558][ C1] __run_timers+0x94f/0x11c0 [ 1326.375328][ C1] run_timer_softirq+0x75/0xf0 [ 1326.380351][ C1] __do_softirq+0x211/0x818 [ 1326.385006][ C1] [ 1326.387408][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1326.397184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1326.407352][ C1] ===================================================== [ 1326.414369][ C1] Disabling lock debugging due to kernel taint [ 1326.420604][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1326.427143][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.2.0-rc8-syzkaller-80999-g31b504f219a9 #0 [ 1326.438401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1326.448575][ C1] Call Trace: [ 1326.451965][ C1] [ 1326.454979][ C1] dump_stack_lvl+0x200/0x290 [ 1326.459933][ C1] dump_stack+0x29/0x30 [ 1326.464249][ C1] panic+0x4fd/0xc70 [ 1326.468299][ C1] ? add_taint+0x185/0x210 [ 1326.472854][ C1] ? preempt_count_sub+0x3b/0xa0 [ 1326.477995][ C1] kmsan_report+0x2d0/0x2d0 [ 1326.482709][ C1] ? __msan_warning+0x96/0x110 [ 1326.487662][ C1] ? native_apic_mem_write+0x72/0x90 [ 1326.493104][ C1] ? sysvec_reschedule_ipi+0x35/0x120 [ 1326.498620][ C1] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 1326.504412][ C1] ? kmsan_get_metadata+0x1f1/0x2c0 [ 1326.509878][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.515875][ C1] ? __msan_metadata_ptr_for_store_4+0x27/0x40 [ 1326.522360][ C1] ? __copy_skb_header+0x24d/0xac0 [ 1326.527746][ C1] ? __skb_clone+0xa2/0xa40 [ 1326.532685][ C1] ? skb_clone+0x4a9/0x670 [ 1326.537342][ C1] ? hsr_create_tagged_frame+0x6f8/0x12f0 [ 1326.543311][ C1] ? hsr_forward_skb+0x22aa/0x3820 [ 1326.548595][ C1] ? send_hsr_supervision_frame+0x920/0xe20 [ 1326.554659][ C1] ? hsr_announce+0x100/0x2a0 [ 1326.559503][ C1] ? call_timer_fn+0x8d/0x580 [ 1326.564348][ C1] ? __run_timers+0x94f/0x11c0 [ 1326.569276][ C1] ? run_timer_softirq+0x75/0xf0 [ 1326.574373][ C1] ? __do_softirq+0x211/0x818 [ 1326.579209][ C1] ? __irq_exit_rcu+0x117/0x260 [ 1326.584227][ C1] ? irq_exit_rcu+0x12/0x20 [ 1326.588888][ C1] ? sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1326.594928][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1326.601282][ C1] ? acpi_idle_enter+0x746/0x8e0 [ 1326.606481][ C1] ? cpuidle_enter_state+0x98d/0x1c80 [ 1326.612284][ C1] ? cpuidle_enter+0xf8/0x180 [ 1326.617119][ C1] ? do_idle+0x66f/0x810 [ 1326.621505][ C1] ? cpu_startup_entry+0x40/0x50 [ 1326.626611][ C1] ? start_secondary+0x116/0x120 [ 1326.631891][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 1326.638225][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.644255][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 1326.650597][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.656616][ C1] ? filter_irq_stacks+0xb9/0x230 [ 1326.661820][ C1] __msan_warning+0x96/0x110 [ 1326.666587][ C1] native_apic_mem_write+0x72/0x90 [ 1326.671866][ C1] sysvec_reschedule_ipi+0x35/0x120 [ 1326.677209][ C1] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 1326.682820][ C1] RIP: 0010:kmsan_get_metadata+0x1f1/0x2c0 [ 1326.688814][ C1] Code: 00 00 48 8b 3f 40 f6 c7 02 0f 84 d2 00 00 00 40 f6 c7 08 75 15 48 8b 4c 31 08 c1 ea 15 83 e2 3f 48 0f a3 11 0f 83 b7 00 00 00 <48> 81 fb 00 00 00 80 72 09 48 8b 0d 2f 7b 81 0f eb 0a 48 b9 00 00 [ 1326.708705][ C1] RSP: 0018:ffff88813fd057d0 EFLAGS: 00000202 [ 1326.714916][ C1] RAX: ffff88819aefa880 RBX: ffff88811aefa880 RCX: ffff88813fff9000 [ 1326.723106][ C1] RDX: 000000011aefa880 RSI: 0000000000000230 RDI: ffffea000000000f [ 1326.731210][ C1] RBP: ffff88813fd057e8 R08: ffffffff8d49a606 R09: ffff8880a5b2db28 [ 1326.739316][ C1] R10: ffff8880a572db28 R11: ffff88811aafa828 R12: 0000000000000000 [ 1326.747420][ C1] R13: 0000000088811aef R14: 0000000000000001 R15: 0000000000000001 [ 1326.755520][ C1] ? __copy_skb_header+0x1c6/0xac0 [ 1326.760842][ C1] kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.766673][ C1] __msan_metadata_ptr_for_store_4+0x27/0x40 [ 1326.772846][ C1] __copy_skb_header+0x24d/0xac0 [ 1326.777957][ C1] __skb_clone+0xa2/0xa40 [ 1326.782460][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.788493][ C1] skb_clone+0x4a9/0x670 [ 1326.792931][ C1] hsr_create_tagged_frame+0x6f8/0x12f0 [ 1326.798671][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.804716][ C1] ? prp_get_untagged_frame+0x430/0x430 [ 1326.810458][ C1] hsr_forward_skb+0x22aa/0x3820 [ 1326.815593][ C1] send_hsr_supervision_frame+0x920/0xe20 [ 1326.821599][ C1] ? hsr_init_skb+0x850/0x850 [ 1326.826423][ C1] hsr_announce+0x100/0x2a0 [ 1326.831103][ C1] ? hsr_dev_finalize+0xe10/0xe10 [ 1326.836395][ C1] call_timer_fn+0x8d/0x580 [ 1326.841085][ C1] ? hsr_dev_finalize+0xe10/0xe10 [ 1326.846269][ C1] ? preempt_latency_stop+0x9/0x20 [ 1326.851541][ C1] __run_timers+0x94f/0x11c0 [ 1326.856310][ C1] ? hsr_dev_finalize+0xe10/0xe10 [ 1326.861540][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1326.867549][ C1] run_timer_softirq+0x75/0xf0 [ 1326.872486][ C1] ? timers_dead_cpu+0xb90/0xb90 [ 1326.877590][ C1] __do_softirq+0x211/0x818 [ 1326.882250][ C1] ? irqtime_account_irq+0x2ec/0x4b0 [ 1326.887792][ C1] __irq_exit_rcu+0x117/0x260 [ 1326.892682][ C1] irq_exit_rcu+0x12/0x20 [ 1326.897182][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1326.903093][ C1] [ 1326.906128][ C1] [ 1326.909271][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1326.915589][ C1] RIP: 0010:acpi_idle_enter+0x746/0x8e0 [ 1326.921334][ C1] Code: 0d f7 d3 44 89 f8 21 d8 0f 84 a8 00 00 00 4d 85 ff 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 c3 a4 06 f1 0f 00 2d 96 7c 5a 00 fb f4 e9 ec 00 00 00 8b 7d c4 e8 dc 48 9f f1 66 85 db 0f 84 1b fb ff [ 1326.941110][ C1] RSP: 0018:ffff888102e77c30 EFLAGS: 000002d3 [ 1326.947422][ C1] RAX: ffffffff90c2116d RBX: 0000000000000000 RCX: ffff888102e78000 [ 1326.955611][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1326.963846][ C1] RBP: ffff888102e77cc0 R08: ffffffff90c21144 R09: ffffffff90c20f83 [ 1326.971971][ C1] R10: 0000000000000002 R11: ffff888102e78000 R12: 0000000000000000 [ 1326.980066][ C1] R13: ffff888102e78b10 R14: 0000000000000000 R15: 0000000000000000 [ 1326.988175][ C1] ? acpi_idle_enter+0x553/0x8e0 [ 1326.993282][ C1] ? acpi_idle_enter+0x714/0x8e0 [ 1326.998368][ C1] ? acpi_idle_enter+0x73d/0x8e0 [ 1327.003476][ C1] ? intel_idle_xstate+0x310/0x310 [ 1327.008735][ C1] cpuidle_enter_state+0x98d/0x1c80 [ 1327.014143][ C1] cpuidle_enter+0xf8/0x180 [ 1327.018876][ C1] do_idle+0x66f/0x810 [ 1327.023163][ C1] cpu_startup_entry+0x40/0x50 [ 1327.028171][ C1] ? setup_APIC_timer+0x340/0x340 [ 1327.033406][ C1] start_secondary+0x116/0x120 [ 1327.038327][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1327.044413][ C1] [ 1327.047771][ C1] Kernel Offset: disabled [ 1327.052178][ C1] Rebooting in 86400 seconds..