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"}, @NL80211_ATTR_IE={0x93, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6c}, 0x5, 0x3e, @broadcast, 0x6, 0x4, 0x100}}, @chsw_timing={0x68, 0x4, {0x0, 0x2c5e}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x68, {0x4, 0xfc, 0x20, "1b1a76a3ef5623b052e87a155d503b4baa3e3a636d033379a7e6d2a46ababc70954ef151251b8aade9c87117a5ffd87fe9b3e309fd6cb7fd857feb8cd775cc7dee5fad6921fe761a24e06f9b8fba3e400fdba5fad49d2ba21332859a654768229b0ebb9b73"}}]}, @NL80211_ATTR_IE={0x79, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x40, 0x8}}, @random_vendor={0xdd, 0x6a, "a0d83e1cbd41802dd38188367847bdff743590f12d8bbcf2a2f2416d7e12fdae1a6403adf64673d64cc07dd98c525e437eeb99af5aa48a27c3f579894401ee1e8a8406280f4e671c9f9b4465fc9fff6ebc5bd1c5aebbe7dbb72bdd61b9f0597cd666921367e16cbf8cc8"}]}, @NL80211_ATTR_PROBE_RESP={0x53e, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "bed3319ba85320e1ba0a79d2c4f1bde181ecec13f35901f5fa13e9c5037720a9044b8d99d11a35434126e3dfc79dc7c7502a7a90b5f4762b280ca34666966ed09080c4f38d3070c2740e"}, @NL80211_FTM_RESP_ATTR_LCI={0x56, 0x2, "ec244bdc5f17e24857725364adcc1dd226089cecdbd4c44da0f1e4b812ff6ebb926419b12c81d808b0fea8fb6a0d6fea5ce55259da853e3ff6ddd71588ceee7b9ce061e0308797c5f9261610c771ae0f46f3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x234, 0x91, "bc72e2a21fa837a5d8cbd8851cbc1d4829f787810e290c379d4bbc11e279f1d8e931f9b12e20f9b9dde1fc64c96318b876a6b9d86e6cc141518b23fba7605af5ef77a0a6da2332da446d2641253c64c9574fcb524d738a07c5e6d6edcd095e4f388f40a6c1e91fa21d45c46036503a0334e98b18ca2b48acd9f62a4335dd258af19c7156d624a45e2741bfdc6afc4270990f2078626c3e5a19047ea25dcbe11d032ca604e64a27f62543c721ae393d2199936a4ba49ab2784abf858a503d6b60824304ca383879321ef0159a58983246ac50abe5a2e99d7eb306e5feaced3eb9b20ff7254f4a6502d356dab57b8a2745ce94708ca45fd92dff0d7560b073e98c5a25ff0c471358248b74cd04b4e674a7c0964747c0ef4f85632e598ee90e75d3ad317509bda8d783fd6ec83deeb1d5b260dab0ff6120816f94139b6654dccec3f55db3a0dd083c88bfde20f6729f877bcdcecf44fd65e09940e3b72fae360ab18c3b2f6d684594d01660a7c3485b42f168a9ae6543ecd0f565a210244ae327477c1bdce9610df4e09d1b3490acbd465d668bc84a6ee515e6e8342800f533e46e6fbc35b40a8d0254e5cd0bc96030fc7cc5574c87bef0c3f9ba1601a8a29b265114f3946045b883787bc2df2f8f9cca04319c78470c5e1c59f9bcb7ddeb8213c2fca0c6d60dae8de4e44a75b68e2db13147e380ba995d6b4cb2875e2da2a0d503a4e576b8e417b23ddacc2a4786b80fd5672ee94dad39f810378ae28996190026d3416e4ff7be984aef719d44ebcf60cf"}], @beacon_params=[@NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@challenge={0x10, 0x1, 0x52}]}, @NL80211_ATTR_FTM_RESPONDER={0x160, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb9, 0x3, "32e87f04e50f42fba743edb070eeec350ab9641868d3ebcc7e34a814bc3e96747c321cd372893c3a332b22615add853ca6aed66206d987629b9eed36f44b56234f466cc016dbf106b336d50632a36ea0c059530e764e3c59fc3cbd3b0e83289594c73abcbbd8d2bf7f340c06fd0d71dd93e13e7f7637f8dd9f5a3aa00b5e8b8e655d6fa605150cb526bba0a2f34f6cb1bd439ab89922d92ef3add21c1828434c09a6e863ecd2826f4ab55dede86604c053909079a9"}, @NL80211_FTM_RESP_ATTR_LCI={0x9a, 0x2, "0f311b53978ffcfd60577a84f21991196cf82286276b17004d253b21c95fac767e261039953d4b51d56f4a32298813dfa557be00669d5443e781d8cd0113e14a527516d5d1b5369fac66721e96d3345292418fa8c3dabe5c4d0899f6b7a267d934f731de3bba6ee7bea752e1619f2b661e1e79e66df879a0e411603a11ec9406d260bcfe07ac3bc172c85ab5562690fca1d6d15392ac"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x5c, 0x80, [@supported_rates={0x1, 0x8, [{0x24}, {0x48}, {0xb, 0x1}, {0x60}, {0x30}, {0x24}, {0x24, 0x1}, {0x6c, 0x1}]}, @preq={0x82, 0x30, @not_ext={{0x0, 0x1, 0x1}, 0x3, 0x3, 0x10d, @device_b, 0x1, "", 0x1, 0x9, 0x2, [{{0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x80000000}]}}, @peer_mgmt={0x75, 0x16, {0x0, 0x9, @val=0x3e75, @void, @val="623cdfeec8a1d311483fd69fb2f6dd76"}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@chsw_timing={0x68, 0x4, {0x7ff, 0x7}}, @dsss={0x3, 0x1, 0x30}, @chsw_timing={0x68, 0x4, {0x9, 0x8001}}, @supported_rates, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @cf={0x4, 0x6, {0xbe, 0x1, 0x4, 0x7}}]}, @NL80211_ATTR_PROBE_RESP={0x504, 0x91, "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"}]]}, @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x47}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7f}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}, @NL80211_ATTR_CSA_IES={0x1760, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x55d, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @initial, {0x1, 0x7}}, @ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x3f, @default, 0xd008, @void, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x74, 0x96}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0x6, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x100, 0x20}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0xfe, 0x2, 0x9}}, [{0xdd, 0x8c, "28c7bd1b575a6dd5e3acb4373bd6b5dc20eb4c7a8532c32cae7287781dcb77b82fd883c7bdfdbad260fed120dfcfd3e53e276b919934c34ddd2b7ab2e21da32834beb9b2a9b4a3422dc98737e9e82d6208d2e253c4ab182ac3a1b3ebd75dc9906a617698500103f9c856ded93143d0fe6e00ffb5e4f9e89197c36d76b6c5d042b11c0bf50cfd8972df20ffaa"}, {0xdd, 0xa1, "33cfd061f9545db7fc496102d123ac6736a814113f73edf18b959757b7716cebcd187efc5aec4abc9823e18d81245e37f2afbbdfe791fee3cd3dab92a1903125d1978b4ff2ea026d2887c6c45d23232d4312453158c6047ca7c341f1d7872243af5ac60fc8391b877480ee7fd99048d5a4e20412eae9c6fa9b9da38ca2a1a1945caea556d334f7f5046f62078d4e49a96af8c85b6af334d5b90c86ae0c6606343d"}, {0xdd, 0xe3, "4124792363704ec0b6095999f2e7e55242dfc7f47cc4e93e61eb79d7135342f3b01f3207c201ceb4c1ed6b51e9d170946d801fa4010869166a8537583961dd3ab2b6441148dea0ae8714f72cfd099cd7f538c3a71b01aae13e26c5e4d71b122b1e318af0f67e4c96d201b7610d0ed52a73ff7cb100b4a68b36600fdaa6c744ab7ccba3ce6fb1bdae411d555da115c3ae8d87d6155da94eb432a31020d7f5388196d6f303d41bf9fca958ea3281bc4e642aaddd3639078d570f54077c23483bbce4a1f6d6807e82f2142a77dd9e48b9015a82863f0d04dd58f9c29241923b00b6d0bc5e"}, {0xdd, 0x1b, "4b7eb0b7e62cdb5a1844c6a94d2dbd2469686a3ec086fd19c6b4c3"}, {0xdd, 0x96, "343b3082b229dbc2a56ec49a1a626d3cf648acbfc8e4f4238d9ba7d42a03530e5597ba995bd38735ffdb105d4b0a8d07eb6eb506f097a34771d51eeb19a0434b537390e23335fcf08812e5a5f7af70177247afc18d56e7dd6a24742d712afc1084467c5dc35ccaee1896d4c4d5d2d5cd1ec005847fbb2f1a6ae0f128ef1f17a674a168916294299f45073eddfc7dcf9d96c69097e084"}, {0xdd, 0xa9, "a2157993876f68ad2017c46bf77353d1f4002e8e936065e3f51ba36a75721d01521e48b98864da809b095f7bbbbc3e2538597a30d293826c18d53963811545f51c4414eea43e1e63ee915e7d58fa84f14e1ae747cfa02b1f97d0ec0fe2ddb7c367aa0a2fc91676b483e9c78b8e6c0498424a1e7ac7646fc8752c0809d46c8a1c6c7d8cd336e9e2bce5c8864f11b9980591ad91bdf0feefacf8245d3bfd68e3e4a532e492420092774d"}, {0xdd, 0xb9, "39410d403a3088de4d75fd58da229c48396a3ab1076b27c971d3d388c00866cae6f0dac45077b70d391e79d56e85dd493d33de415a8a85e408da97ceed74c672eb0c19ecdb745fa80ec419afdeb7d2169aec63012341f093408f177b367417acd7b1eb5c687a0ab1562e8b69570255eb30db4b6ee31f1f60188456e4308ceea522d6802cd77d92473539648f262640bf8a96620569e4d546d3a1033329c61757b9deb75ab8cbd29bc5ba9cc8b2a2c3018e78d27a2acfb0bd3a"}, {0xdd, 0xc7, "18937a45f9145f7412cbd4b70d00507e42daf81b930a904cd3ff2fc0719de5ed4a68413280b20ad2d66dd80e5975f7e6993dc148e2534cd405487d4e1cd2ea2df777d4152129433efceaf98de070bdb7e0b5e08115bf3e2706eef471a752aa38885cd4c523fc0fa975a1868936adc91c3480d04abe0a7d756b25a1bb614773109008e0b1d07332ba51b8d58f7210c50683f3655e15337eee0ac68effec59178c3fc0eb08138b7575e6c839a00458015f2bf7026e93b51c10d196ec34ae67b3d2e6b5c6b1b51ff4"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x131, 0x80, [@supported_rates={0x1, 0x7, [{0x16}, {0x1}, {0x16}, {0x309f23530a8c66c0, 0x1}, {}, {0x2}, {0x30, 0x1}]}, @preq={0x82, 0x2b, @ext={{0x0, 0x1}, 0x9, 0x7f, 0x4, @device_b, 0xc9c, @device_a, 0x5, 0x3ff, 0x1, [{{0x1, 0x0, 0x1}, @device_b}]}}, @supported_rates={0x1, 0x3, [{0x6, 0x1}, {0x5, 0x1}, {0x1f, 0x1}]}, @measure_req={0x26, 0xf0, {0xff, 0x0, 0x8, "43dd19b457d7ed354a18900487137bc7499e9f2373b81f92a5dc75e9b2f2aedc0924724d3c7ce10e91aa73d8e0c26792c2e95f6d796d8788a32553273c2157c4fe03e494604f6bc78dfdcccdb4908bb027f7b5ee281cd57ca87a75788b8dbec9ce23c14c2bfeab34db21e22ded6e3edc6d7e4d316913d37ae3b5889697bfbf34623e96c04f2de69ab976c87484e7f6516120c63844ed2e25a2ba978076a612c861df4a3ad799ac7b9403a4562734c4dadb85a1fe2060f3e9862137e9408b883afa499215e26f6a9fabcb20638f0915782980ca514e0075bdbf26c3f4d4671b99c3d4787d662b81a2e5db59ba04"}}]}, @NL80211_ATTR_FTM_RESPONDER={0xb8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "fe04eca603b235502b1558a04bff64a47eebe3090364075cf253c1e6c32a884dbb67c95c495f5ede4a7aa713044c2f1f223a4e83a22c2082f7b11d6897c8583cf4144237dd80f3dde3e5922944046cc637cd293875ce76174eb2074157ff0d92d33883f10e3d2a33dc32e2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3a, 0x3, "c112c7e5d4df79e48c1866414b01336a413aa9bfaf911c3b687d7485e6175d8aa192d6db8cef5c6b8b6e9d02fa355d079861ec9bd601"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x168, 0x7f, [@supported_rates={0x1, 0x1, [{0x12, 0x1}]}, @tim={0x5, 0xfa, {0x7, 0xbc, 0x0, "0296f56f2bdbdb5dc8c8e4c96cd7cef3c51468e198e003e15bfa1adb0d43e05c08714d9ba6a8460c79b0a539ce63b8c8ea54690aac036497d9457c5d470b5076fca8c046197aeb1b03e9ed394755267ccf6ac0f63ef506da5bdbaa6781ad8f5c0f0bca3679b65fbd9f11ced9634a3f87cbb42dd4da39fe1eb393240be0c2ebd9cf1219e1d803ed06e275bbfe5560326cbb6c168f82ceef3be85159e80394a54fffcc8fae609eecfcc58740f17e867fb3a657ce442eeab3a320599047b759a6f3ab282aaa6fadd7c9c34ce503b8595cc0417289cbabbed90d5a63d859bc11fb171ec4fab02385236dde95164c7922d245372cbe5e953425"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8, @void, @void, @void}}, @ibss={0x6, 0x2, 0x5}, @random={0x5, 0x56, "ac3df0bfc44426342f19dccd3206feb5b15c84eaf224695197d67d41f3880eb44990f6977ca3c5d90a09cd6357815f67b3478796d9b0f6f2525cfbe955bbaeb40e9dd75f3cf4f8ea8b478cf67c971a016d5c5614aaf5"}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1a0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5f, 0x3, "28e81ec3625776dfc7d87fd2c54f32041945a72e751fa3d34b1676bed11deb7521b122ab7ce236bffc6fab482bee8cab18940fc9d46f10a1c1ce374983efc6259cd00bb821e884ab6ee92b88a91d88529269f3075151c9f02786f8"}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "e04fb162e6eb90497f082d0224e400b806d15a2aeada7eed20ef090d6c955747ec36239b2895637ab1a013641d2e933608ecbb0724089162d2ec3b7c3216d10ddf9d85719b17c95e5cc73e5c9237b13ebacddcff4cf7e4f2498dc1b35bbd7b98228056b72925b1e28ce71ae56b57615d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "1d2e3859b21d9f7720e56bca25505dda836c4b6d5177b2f60fb13db21d1c426f85ebfbec5b9204bdbb8b4c309a1c9798478d76f3022e9a21a962c756c3803f19dfc91d1f1c2e9568bd75ca4f1b8037b41013f2507d8ccc13fd90c51b0c7a767fa5a4ec68b7"}, @NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "288c82651d5e28c5444f6330c302ab70853efc446a8121755875dfae06a6b2fc5de2f20e45c3ced3365932a89a667b91df484c98db62c2d1fd7e8e114ba97159329477bd4d3c5748fb6745c66b52823b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1e7, 0x7f, [@mic={0x8c, 0x18, {0x6e4, "674276de2ead", @long="c1ef80185b1f1d50e429796fca292975"}}, @perr={0x84, 0xfb, {0xff, 0xf, [@not_ext={{}, @device_b, 0x4, "", 0x23}, @not_ext={{}, @device_a, 0xb8b2, "", 0x2c}, @not_ext={{}, @device_a, 0x3, "", 0x28}, @not_ext={{}, @broadcast, 0x4, "", 0x3}, @not_ext={{}, @broadcast, 0x4, "", 0x16}, @ext={{}, @broadcast, 0x800, @device_b, 0x37}, @ext={{}, @broadcast, 0x86, @broadcast, 0x31}, @ext={{}, @device_b, 0x7ff, @device_b, 0x9}, @ext={{}, @device_a, 0x2, @device_b, 0xb}, @not_ext={{}, @broadcast, 0x7, "", 0x5}, @ext={{}, @device_b, 0x800, @device_a, 0x36}, @ext={{}, @device_a, 0x7, @device_a, 0x15}, @ext={{}, @device_a, 0xfffffff8, @device_b, 0x2a}, @ext={{}, @device_a, 0x4}, @ext={{}, @device_b, 0x2, @device_a, 0x3c}]}}, @ibss={0x6, 0x2, 0xde4}, @chsw_timing={0x68, 0x4, {0x8, 0x9}}, @fast_bss_trans={0x37, 0xc0, {0x9, 0x6, "a1d7cf010b79579cf20521b1bf55ef0d", "7a2472d69baafd81423679774766a51697d7a5f8637e6f00f74da917c4a59ef4", "7a5b3786e4bd993ac897c09a4f6ecb216f73ff94afb0ee4661f90472e6783b53", [{0x81, 0x17, "410488715ffb57a2eeee2e480a5be79a8d9debac06c28c"}, {0x3, 0x5, "f94d9284d0"}, {0x1, 0x1a, "dcfc3470ea023836c9442aa05dbaa556e9950c124473c918930b"}, {0x2, 0x10, "9541847b01101d2a5576910ceceb993b"}, {0x2, 0x6, "a6437d38e369"}, {0x4, 0x16, "bb7fd34ffe084dd5840e87de57a04944bd58bb03d6b3"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@link_id={0x65, 0x12}, @channel_switch={0x25, 0x3, {0x0, 0x9, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x9d, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x52}, 0xc0, 0x81, @device_a, 0x6, 0x34, 0xdb}}, @mic={0x8c, 0x10, {0x2a9, "b092db512acd", @short="d49055deb528f7a9"}}]}, @NL80211_ATTR_IE={0x20e, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x3, 0x0, 0x0, {0x3f, 0x53, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x1, 0xe0}}, @tim={0x5, 0x50, {0x4, 0x47, 0x3, "223dcd9ef22339a6c4c9d9c7be2a142787085643c01e4bcda9883fe35ab58b43767f77a4cdb1c7d398e228a284d2823441b1c0b26283314f5b28d05607ee93830a8b9651831f6e728594cf5e83"}}, @perr={0x84, 0x122, {0x4, 0x12, [@not_ext={{}, @device_b, 0x5b5, "", 0x10}, @not_ext={{}, @device_a, 0x7, "", 0x3d}, @not_ext={{}, @device_a, 0x15, "", 0x33}, @not_ext={{}, @broadcast, 0x101, "", 0x34}, @ext={{}, @broadcast, 0x6, @device_a, 0x28}, @ext={{}, @broadcast, 0x3f, @device_a, 0x3d}, @ext={{}, @device_a, 0x5771, @device_a, 0x1d}, @ext={{}, @device_a, 0x3ff, @broadcast, 0x2d}, @not_ext={{}, @device_a, 0x81, "", 0x33}, @ext={{}, @broadcast}, @not_ext={{}, @device_b, 0x81, "", 0x3e}, @ext={{}, @device_b, 0x20, @broadcast, 0x1e}, @ext={{}, @device_b, 0x0, @device_a, 0x19}, @ext={{}, @device_b, 0x800, @device_b, 0xe}, @ext={{}, @device_a, 0x9, @device_b, 0xf}, @not_ext={{}, @device_b, 0x5, "", 0x15}, @not_ext={{}, @device_a, 0xfffffffc, "", 0x11}, @not_ext={{}, @device_b, 0x6a7b, "", 0x9}]}}, @chsw_timing={0x68, 0x4, {0x1ff, 0x70}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x152, 0x4}}, @random={0x94, 0x67, "a747ac365d62d9684e1313889fd6724f51f81a25134ba8a2424ac3797e7969c6a332071b3fe000502a851d116f56d304805e295339ecc6a5162b75a23aa14f0709cac6f48ff73710a7bf5ae6ee24745dafdefc3c6661fa4f900a736fd010e6cb8bd2479a3691fc"}, @dsss={0x3, 0x1, 0xae}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x15, 0xffff, 0x6, 0x6, 0x2, 0xfff8, 0x8000, 0x469]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1000, 0x81, 0x8, 0xc7]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xc8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x3e, 0x3, "02eca810b3f74e62774453d11888d3a96e216f17a726ce47bdad5b3c913557aa3dd20b5dcbbfb5e5c23b1652b0617f07d1d3f8bed78867cddace"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x74, 0x3, "e89640c94ed84d575782e3d56e710165d5ff66b992a524a81f0994f108c6269400db6241c984c08ef34ca365a22d4c896f8ef61ff5bf127418d2f8f13871b9a9f9c76817948c860b905911d6f0e3c19d3895508be8d06c1cbd304fa4d28329c373ca491f648b273caa5d4f4e979c1859"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x34c, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {0xc, 0x4}}, 0x1, @default, 0x804, @void, @val={0x1, 0x8, [{0x6}, {0x4, 0x1}, {0x4d}, {0x36}, {0x12}, {0x2}, {0x32}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0xc3, 0x40, 0x7, 0x596f}}, @void, @val={0x5, 0xed, {0x1, 0xff, 0x8, "150d99e30590024e90566ad77d19a94834695020ad54a1769de7030a28569f476db13475bd200c8278cc6fc950e850ff6a77e4fc3dd9a0202c305620ce5dff9894ac9f4fa54e8c3a3d33ff7f2b28551274b98e2942da25afa979c90207732d2f2750e4d64675999347ae876eb3f30884af7b8d8217001ddf7efaccf1f2a0ef6cd97f7d6992759ebb68b0c7e8b5aec38b980ad26274dfec8a04c657ac5c57bdf7e170ef41a664d06833a314c5b98990baa38b1c26c69d7790158e8fef795cd02ecd33ad8ca12ca8ccbc33bc047ca55ac8f4e8993007ef00d217a8ff109a5789c294ffa78b836046f4f992"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3f, 0xb4, 0x1f}}, @void, @void, @void, @void, [{0xdd, 0x60, "59bdb4221e085e013dbb814e7a1e5869af3067897ea08b52485018fa09efc5ffb380e4422849b7f838c78b4facdb89d5cf18d849d7a151250f0fc63819e45f7bb559fd37b569c0626cb6dbbe239f0e820738ad0b9e2682bd94f2c4884e51f938"}, {0xdd, 0xd9, "f929289c5713e52a41e08a20b24af35f9dff6d2d8857ff75ff4283af5f8ae7a8b62ee58529f1a3e58b0875efd8bb561311ec76e9f9037e2a7a5fa075faf5b238f301ef4cf8a75df2aeae337dc18223e451d3c076efcbcd1299d1d35c440e862fb89b988235333422e9a841f80b54bf8ed92984b92a37008879e9aeff5663be96243b72dd3ba8dd37beb00f5f39ee206581867f0f77830252733c8de6ec45737249b13a0a5767d4a2091b77b185fd3b73e276c966ca00dbc725871cdc65b7f4cc6c102803a0daef2f840932598fe681524af83d5751dc3d588d"}, {0xdd, 0xdb, "f3ad4c3282910b0aa245bd6368aeb7cb6286deaf9d7e221af5d82ad7e7409c6c7d4b5820fd0b099d67b9d2cc64a87b825059368ca191bdd43ba6b933b67c1ebd2031761bb4b07427bcb19ada9baeecfd7862915bd6e556356aff37197f1f502377466f491b959bf2767c1a7f485ade9a41ebe752275fda6fc9623ad2916917e445a937d2a8dd6ccb485140adff24d699b4f06bdeecb07d087176da98f252dbe40dd10e481e94cc0fd651fe9eff0afe3d8e45dd1b665309a68ac84a0ae08b6c421c3d6ac6bf497a68a8a78af153465436e6fce0cafb0b4639b1e3eb"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa5, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @tim={0x5, 0x80, {0x5, 0x92, 0x3, "63897f62500013ef1be9aa4e363533516fb5aa0e38da22f9363305da828b03168e25203a00cea5dd2458b05a79510599051caeb2e19f9e975ce6b8d2ccd5536d7b36d03d78b5ea49b60d023208df9205f48d380abff256019937cc78d2f37f0d67b3d25fc9113fa6b9a220dbf63d1f2dd22baff47ae8411758876940a3"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @device_b}}, @supported_rates, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_PROBE_RESP={0x3d2, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8000, 0x7f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0xbce8, 0x4, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9}]}, 0x8688}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000020cb0f676e6c014310", @ANYRES16=0x0, @ANYBLOB="000107000000fbdbdf25160000000500040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x200, 0x70bd2c, 0x2, {{}, {@val={0x8, 0x1, 0x33}, @void, @val={0xc, 0x99, {0x5, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x80080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 22:02:14 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x53c, r0, 0x1, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x520, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x81}, @device_b, @device_a, @from_mac, {0x2, 0x34}}, @ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x1, @default, 0x100, @void, @val={0x1, 0x7, [{0xb}, {0x9}, {0x9, 0x1}, {0x16}, {0x4, 0x1}, {0x12, 0x1}, {0x12}]}, @void, @val={0x4, 0x6, {0x2, 0x3, 0x426, 0x7}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x5}}, [{0xdd, 0x1d, "f444bd802461ca0b50394508dde80a7a15c952d0702a90f05b6bb8b76d"}, {0xdd, 0x23, "9769d52fc755987202f3d7b7f5c416a34eeb046d5437be88ebd8b20d3bd4a4a35e1e3d"}, {0xdd, 0x69, "86c01d33ec824ad2f1e42e4826cdc0e14733dcc612b51bb07ec4dd3a10713d6dc9a3d311f4527b98fe0604def3f7c82f00c45878e8cecb6b1cf477aa01183c091f3eae4eb6eb0f216caf84d9613f5042cc7dba6d820f2ab02bcde4fa33f9c4da306a3e38f31fbad146"}, {0xdd, 0xfd, "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"}, {0xdd, 0x47, "ab82c2e4b0bffc4e57a9687b4c49ca0f56990f3a1225af2d6cd5eca7650faf28b55f0f0e8b343f8ec682dde5d4bbaec2965fef27931c14a63f98a63f0f25e8c45b308a6d0e84dd"}, {0xdd, 0xa6, "6461f1c3f45931786bc6f50fbad026dc0170c05a285518ea4d75ef6ca3f4ebbf823e26e07f4d7b9773abd916d926ce67b2a03dc11de4e9c59eb5ee2132bc20df0b5e561dc8e8fd4cc8c2709c0d26c0752c43de4f1b9c3a53f030383199c2d61324033f4efed3daa89aaaef99fd5e574154cd381ce28dde2e3a697754212f62ebe2bc04e4374df17cafc2108b5597eae22900bb5a0e4d712bf59a377e068b60900bf054e514c9"}, {0xdd, 0x96, "e6be5b7fb4a8658596e48df2e7498cef0bf85c5fc6a7ce8b4b1c624d1909e8f08b8784d0f1a0d24166825127bd061ec90fff6b9e98fb3840089bdcb9b041f2682f4c3982f57ad5a4499459941002e6a2bca44d8996b66a48d10cf3201cbd200abbd74cbcd092f56baa8792a0d5305348e8bce2f8e9ec3790cc1622d0c934ce6efc94e4e9d19308d759c5db2fb43a80cdb2c2d6ca7b73"}, {0xdd, 0xb0, "9546d9e34694a8b5a8c99cb69e34a3b2fd13678f8fc6103d7c1401502544c1e3ff5ca203bee70415adb40dc9dad84dbad6f2b86b5c63e4a760a4a57bdb1cc7514ce078d1afe612345e6a9da7a43115057a2a8d06b989a5c80bed60050f042a6a185d0b7aa650683a74d06a3c40c4e064aa6a3e970121c2d1abd7aae3206b238cae209baff72214e8c16e07dd7a5267d8199424017333857aee46b6be568aea4d89cb55ff7be2cd5c3dd9bef4ce48eac7"}, {0xdd, 0xbc, "04d3a1efa67b145f9da91fd603f456d5601ec6ab2356583e3c7182c2cde3158bcb9f8004bb7ad49a1379fa71b8f451a1f66e408e5b0d6b1065bed9def5dcc54a862843dcf930d372af5470edab14749ec51429a760ced67d0a1319b90fb07d0a3513d001b63a863cd85102969575f26d9807fb8c054d37e4272d27b4813d27b2baed0c5df48250a9f9885c17749a563f3402d00ebebd39cb73e38ebd05136ac461974e9c00569126bd87b08f6c2342128b53824b16651813217b3b47"}, {0xdd, 0x29, "f945ce9680a06c0d92415065c720b2a93e18409bcbb16ba836012474395ca991ad7ade328b8b3ce29d"}]}}]}, 0x53c}}, 0x0) 22:02:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB='\x00'], 0x48}}, 0x0) 22:02:14 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) select(0x40, &(0x7f0000000d40)={0x40}, &(0x7f0000000d80)={0x1f}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000e00)={0x77359400}) 22:02:14 executing program 1: prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x180) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="94bb9499bd010c2f252db6b19fa7702ed4e682208c9d22d6b1d03f1324e3b72c3a4a9c0dcbbf0afb06a7799b2f21b1dd0b93fec0be8ac69d30f089611af23e86d69cdfb2f2b023e5d1a4895449a9160e6cbcd18864acae6c0c224e038b1e479921d607ac5a52c79e192231b9fc3950b409e148fb4579bfb3091af60ac0106af5c7e206eab15e94ed407a429a648dac0f564f8e60bdc1f18123898b60d89eb22018091a38df3a16b8c9c10448ee582dc2eda8cd9f249508571b8b7dda04f1865dda647e0db9f59d589c3660a870d10d2ada94a13347a6656d5e7d4fbb7d4670996a9b7887cd1c45d9ff39bc9692", 0xed) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/121) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB='\x00'], 0x48}}, 0x0) 22:02:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000e8180fb3880000080003", @ANYRES32=r4, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r2, 0x77452000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xe0, 0x0, 0x903612eb50d1ead0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1c00, 0x34}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17493be45458cc6a1688a04bc57174cb1df3a4765492e433"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3a589bd1f64df7c1e0132cd2880e231fed08af64156fc25"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x6000000}, 0x804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000010000000000000000000008000300dcd3d68e5979f7e865f236f97da552d9f29909bfe156c0e6b9d377ddb3bc1fb93458bdb0b1f8e8d677990d4775a5ef64f0018c81276686df70e342903839e6ee", @ANYRES32=r6, @ANYRESDEC], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$inet(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4900}, 0x8e566e683a701d91) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x40}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) 22:02:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x20, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x561ce937}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10f}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x3, 0x8, 0x1, 0x0, 0x20, 0x37]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000085}, 0x8041) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x4, 0x4c, 0x7f, 0xd56, 0x8, 0x3]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x981}, 0x10000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @from_mac=@broadcast, {0x4, 0x4}}, @ver_80211n={0x0, 0x80, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x21, @void}}]}, 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000080", @ANYRES16=r6, @ANYBLOB="00082bbd7000ffdbdf258900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0xd2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 22:02:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001980), 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000000200)={0xd0, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "19fa20de65a6fb644170d2b5aa9d6c4c9799d4cdab18a3e8"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r11, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="200027bd7000ffdbdf251c0000000c009900fbffffff37000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 22:02:14 executing program 3: clone(0x210612c17c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) 22:02:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @from_mac, {0x8, 0x535}}, @ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x0, @void}}]}, 0x44}}, 0x0) 22:02:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa8, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1f, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbf}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x30}}, 0x44080) 22:02:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100"], 0x48}}, 0x0) 22:02:14 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000540001"], 0x14}}, 0x0) 22:02:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]]}, 0x3c}}, 0x0) 22:02:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000908", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000003f3b408e713f6c81a3f04fb636711dd3835df025adb35bd1b1be2f73c0d8b64fd36b42b3838956ccec950c9d2800e3dbaa414b5713", @ANYRES16=r1, @ANYBLOB="000300000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fbffffff78000000d0003300b0000000ffffffffffff0802110000005050505050500000000001000000ddac3808da9eba2c4dd8e464dfa2019dcfd292fec97b51db5c0327795128c8c3d46d894e2383bfa9d81a2ae319a36211c552b7024fcf81221a73b69c7c4756272caa93d050a100f6bb6d79ad8a314af909a57e04c8514e38785ce7e1640f4156899157bd1f67933716a1bc113227ec9e98d688c09648840e045bfe40c33b955e7b269cd952de9d9d2fc221504c35c28d9f723272e2c7916a03f5b54e4cedc34c8bc7cc7834925dcb6f3220904c24"], 0xf8}}, 0x0) [ 405.943760][T15788] __nla_validate_parse: 6 callbacks suppressed [ 405.943781][T15788] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100"], 0x48}}, 0x0) 22:02:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x101600, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xae, 0x57}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 22:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0xc0800) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000f2ff000000003b00a67dd7d1838150851fcdbb80ed18000008000300", @ANYRES32=r4, @ANYBLOB="22003300b000000008021100000108021100000050505050505000000000030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 22:02:15 executing program 3: r0 = getpid() sched_getattr(r0, &(0x7f00000003c0)={0x38}, 0x38, 0x0) 22:02:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="040087001000cd2f3c000800070008000080fe426100"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fdb099db0000000010003b00f71724bb99386aaa000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000300ffffffffffffffffffffffff505050505050300000000000fdff0000"], 0x40}}, 0x0) [ 406.314341][T15810] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 22:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9243, 0x10}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x4c}}, 0x0) 22:02:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100"], 0x48}}, 0x0) 22:02:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000002bc0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002c00)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r1, @ANYBLOB="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"/689], 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x48040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) accept4$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000027c0)=0x14, 0x800) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/192, 0xc0}, {&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000000)=""/116, 0x74}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000002440)=""/249, 0xf9}, {&(0x7f0000002540)=""/116, 0x74}, {&(0x7f00000025c0)=""/154, 0x9a}, {&(0x7f0000002680)=""/114, 0x72}], 0xa, 0x4, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002840)=ANY=[@ANYBLOB="400083937122710000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000c9c5"], 0x40}}, 0x0) 22:02:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x148, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast2, 0xfd}}}}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd564}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6eb1, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept(r4, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r7, 0x2, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}}, 0x2000d814) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x48014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="22003300b0000000ffffffffffffeab2837f2e13f1edb70802110000005067505050177bcc8b00010100000000"], 0x40}}, 0x0) [ 406.574211][T15817] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 22:02:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x5, 0x4) [ 406.627312][T15821] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.635842][T15822] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 22:02:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@broadcast, {0x8, 0xff}}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xde8) 22:02:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100"], 0x48}}, 0x0) 22:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x18}, @NL80211_ATTR_BSSID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040004}, 0x4004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="010500000006000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000f5dbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900020000004400000024005b0098cbd5bf88e48b9172b1d7de3d8466f2921711308ccae41ce38f23888daa079c"], 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socketpair(0x21, 0x3, 0x4, &(0x7f0000000280)) 22:02:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:15 executing program 3: socket$packet(0x11, 0x2, 0x300) select(0x40, &(0x7f0000000140)={0x9}, 0x0, 0x0, 0x0) [ 406.942358][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x64, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7dec1ed6b2"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "506eaf072825c2e58dc40d645eda04"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d9c0f19c2f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000814}, 0x20048004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x1405, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48045}, 0x20004840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80, 0x162, 0x17}, 0x18) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x13}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000280)={0x5, 0x871, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x1ff}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6, r5}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x3, r7}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, r9}], {0x4, 0x5}, [{0x8, 0x3, r10}, {0x8, 0x5, 0xee00}], {0x10, 0x7}}, 0x7c, 0x4) 22:02:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100"], 0x48}}, 0x0) 22:02:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 22:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x68000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8008) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4028800}, 0x4) 22:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) [ 407.326286][T15858] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:16 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 22:02:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYRES32=r1], 0x40}}, 0x0) 22:02:16 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x130, r0, 0x4, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x112, 0x33, @auth={@wo_ht={{}, {0x1}, @broadcast}, 0x0, 0x1, 0x0, @void, [{0xdd, 0x61, "0dec0959903e176cedb345aa82ce7fdfe3da6e3f6e2003c7f404588a82e8d7c409a6088d2b4cc7d278641fc34615201410a8fa5d392cb26d93b72aa5550e04d02667ae189f64c7159b0398d0ed4c93559cc18fb0206b854cac9c8603796ec58b83"}, {0xdd, 0x8b, "468ab4d3ce2c4ecf08fff9e075276a484062bc74b53fcadb6bc9ecf3054d9eacd08521d9139ace1f57c64ecec1c643aa66a86942c1597eb33f79d2cafb223e96260303a98eb4a6e0d07ba3096c3d3d0ef2d3174b818c148f4dea8726b01433e685c87edd3c7cd2a97bed2a4d63546ed6d57b740f28ee1ff036295ec9025dba0b16e569cf4c8ca1c6be2443"}]}}]}, 0x130}}, 0x0) 22:02:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100"], 0x48}}, 0x0) 22:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d146d09546986377f8abe4ec03fa0a810679d8bcd4fbc76861ab975e71fdc9b0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "72581748e896faec"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 22:02:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0xc5}, 0x2c044000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0x0, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x0, 0xcd, [0x5, 0x0, 0x8, 0x6, 0x3, 0x600, 0x0]}]}, 0x40}}, 0x4000) r4 = dup2(0xffffffffffffffff, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x810}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6041010}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xff, 0xfee, 0x9, 0x3, 0x2, 0x1ff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x98, 0x9, 0xe435]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 22:02:16 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) [ 407.726418][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x80}}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000700ffffffffffff08021100000033da522cc8522800fdff000000000000"], 0x40}}, 0x0) 22:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @val={0x10, 0x1, 0x9}}}]}, 0x44}}, 0x0) 22:02:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'veth1_to_team\x00', {0x3bf}, 0x8}) 22:02:16 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') 22:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003006c942bcbe12cffa563b307331c1f86a8427b9d7adb9b429490b36235cab3efadf3caee594a2254c777a4d8c1a2975d5270154974a5498208811ed812e9aa7fb615a6a17c14f1b1666478fb6f8807e5a5c8652bdaecd99b4ebc203d1a5c5eee4576b0e5581c4b558d18a423c02e1756f05b42ea63f7d61b4eb4346e9bde1325b3c064fb0b9e49000f337753f8ac4c7edb258aeb49236be8958ea159f623fc686726e6e89d843073cf05dec462dbb621e8143b077ef27dfb6b10fb900d", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) [ 408.105520][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = dup3(r0, r0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x400c2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x124, r5, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d260c190a0333364aca902cced480e32ed94f5ff394fd174"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e3742b0a2a25b5238c4ae7cc86209b24b45acdd99a79e74a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "968514adc0deefbd79b2dc46a8d45bb796f10f16269bcb5c"}]]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) unlinkat(r4, &(0x7f0000000080)='./bus\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7fffff", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf25130000003000018014000200687372300000000000000000000000000800030002000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40008c4}, 0x48040) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002bbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020077673100"/20], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100000800010068"], 0x48}}, 0x0) 22:02:17 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') [ 408.464256][T15918] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x2, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x4, 0x4, 0x9, 0x4, 0x1}, @generic={0x7, 0xe, 0x5, 0x4, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0xab, 0x4e, &(0x7f00000001c0)=""/78, 0x41000, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xc, 0x401, 0x400}, 0x10, 0xffffffffffffffff}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000121c33a0caac448406aff0f190e0d70d90ad", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xaa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x161}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60000000}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x410) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r6, 0x210, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1500}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) 22:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5f68}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x48800) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x2080) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x20, 0x70bd2b, 0x25dfdc00, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008880) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000c6e1f1f2e0dc3f77bcafca95dab0eb46a933f107db1c2c8862217c57a36db4f4080a8388eb5049aa9e628a031f42eba7bb432462182f8748998fe44ea7af5d87bf4b03b9d9c4255196f354c040ab90e499ed6ce465877b40f15ab3e8a0ede72b9a3cb3f135c6a441081668921b297b54da77f894b20b801b0094f6a620d0152243a0503d7e096e7fc0ae0fc54dbcbd7bd7a19ad29fbcc697dfd470ba8ccfeb657890008c863baad42b0a21790031588c21789c987609883c53c8b5c9413286c2df31", @ANYRES16=r5, @ANYBLOB="0e0325bd7000fcdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040014}, 0x4800) 22:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x44004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000075261a4b1a297c03d3e0a6116ee95635250c04143cfa5da1c84fbb09109b571bf32e11255daa534f800fab6d82110959157602fed9955da38305e7a24af981bd8afef17163668e4d107a0638fff12578878d39e8383a2c54cd70452a2d2d9aa55fba30e12635c274aa67dd6e3a4b081619dce1d69ac540158c74e77b5b50a67a87d445c0d2dc69a1847caceeb19db773f790f441e92b03082ee22a540726f07096e8791a21fef88cdf672c412a63d831b8168d476938f163ceda1035a3c1ac06d58c215c878012298c336353efc3aa389297b491d84c605b6c2897df70d7780c054edcffc8", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14008407", @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000"], 0x14}}, 0x0) r6 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x44280, 0x60) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x54, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x1a, 0xbd, [0xf8c6, 0x8001, 0x81, 0x40, 0xffff, 0xce6d, 0x2, 0x8, 0x10, 0x6, 0x1]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 22:02:17 executing program 3: r0 = inotify_init1(0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{}], {}, [{0x8, 0x0, 0xee00}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x0, 0xee01}]}, 0x77, 0x0) 22:02:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100000800010068"], 0x48}}, 0x0) 22:02:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @remote, @bcast, @bcast, @remote, @remote, @remote, @rose]}, &(0x7f00000002c0)=0x48, 0x0) mmap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x810, r3, 0x8e831000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x8, 0x80000000, 0x9, 0x285, 0x1, 0x1, 0xffff, [0x1, 0x29d31fa3]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x8000) 22:02:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x130, 0x11, 0x148, 0x130, 0x0, 0x278, 0x2a8, 0x2a8, 0x278, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffff0300, 0xe8, 0x130, 0x0, {}, [@common=@addrtype={{0x30}}, @common=@unspec=@limit={{0x48}, {0x0, 0x80}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty=0x300, 'macvtap0\x00'}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@realm={{0x30}}, @common=@set={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xf0, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "015a522d4fc6398337ebffc102a3babaa38c980edf74a4e2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b447f1e412fbccfc9e3491437fbf675a2cc94070b3883b82"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ce4594d9414e165c313ba6b22a0eb4ac1b15b80903cefb0d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4996bb15fa5468f7e86746fefe2b6e4d65e5314516e74023"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 22:02:17 executing program 3: io_setup(0x20000006, &(0x7f0000000000)) 22:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast, @device_a, @initial, {0x0, 0x8}}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000100000800010068"], 0x48}}, 0x0) 22:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x1c9000, 0x1bf) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x15e0, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "82f951796566762cc3ad08143e244f34c63b8dcf6612feb8ea9c28e17a50ed41f49f1a0d5ca97d02"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "53672cf661428c18866bf20b2c99632e6dd01f677aba692468b565"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "c1ad2f59af9b990f0693170e0d4b2350fad91091d5808984d46ce8a2a7e7ff37088745ee6a310bb1a975592f719322cb7aedabb58bb7f011f2e8dc0c5d9407e39dc89e17beaaf35cf7ffad70fe5d20"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x89, 0x3, "21bf27c4503fee6b44eea78c1c00e106df4bb1046275be1b116628534842f8bfafff66f186da8d90aaecc60086f8b655ac3177cd40936387bbf701bde12f06841da7d7547b387ae34b40bce4919c4b5023ec1eb6a813669fd8ef5f38feb9f820d26da4db9d4ce408a055ef02728ab33adcbf5ad834c590aa0c2a9fa5cebef230223f76081a"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3e9a5faf09fd06d73cb496abaea3e37b47eb3cbd81717f00a96dc39bc2"}}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "13ee60419f425f0929c1e3664efa8a8c46a05c429970b309aae364a91d69036d87804650f1004229d57658c30fd41e9fd72db9ca6ef8d847ba352f9c7c5acd262e09361b3eceaa42571d3f6f47b62fbb0199b0463e8bc7dca09aca95ae3b121ea19032075fc9d0905bbc604e682007b72072ffbce7fc555c0eb6b308f693fb07480906bb8bfa007de68c74b1a4c089ec9b3f2ce098c656f5255e7cf478bac94c000af8efd2ac91c2e38a764b9c42a41b1259"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84f4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff9a58}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9ad}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x54, 0x3, "7e9854d13ee7bf4c419ede82638e3b403f414e66c88ed6dc6ca60ac3595c55696925d56cd27135a0a8b12434867af134bcabdadf83b3136fda5404f5097a990e514b3d62cdaa925842e0261a973fafd0"}, @TIPC_NLA_NODE_ID={0xc9, 0x3, "f1e4e697a336f559e6fed78cf2c1c6f7925cada081c2cf529090efaefbb279e74a4f4ae5a1a7a46f3c708254e49545dc69f745b9f190f3584a2062473074ad035ba42bdfae798e9d63928c6b00262df66dbf4f0cd4854ece8e90de8f82e3b1bce3f417fa542d709951f6f24f2f93504c94577014dfa1334d2b2378e75e0a51ad43b3c7666609664b7aa03494c12fdfa4a59cc9c9e17b3f2f2d12fe51739211d97fb453356af667814601388c11f73025fe19ab25de6d52b90dc751fb7ee045ef8b7fd52d3a"}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "3567ace2bc0690a5b8a714bb482f02fb2c0960e21d0d7744c3c47ed7f5ecd963d29f8f1df1daea2327eb943c7f6aa1b836c2239a2035db8a94cce814451b69633bbc72e6812b13d10219ac0f2748298803a27f65ca54f35ef508450af0a89d93dfd276c72fca7e81d24a40a366dc7e0d90318cb5136b0e419ff6580bfe9495b62a7c4f97d3f7c225225e004583432b71109412854c0aaf"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf8f}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x40040}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000008774e91609d0e83a0c07010a5a6c767a6816307650865baa", @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000c009900020000003b00000022003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x44}}, 0x0) 22:02:18 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 409.247548][T15955] Cannot find set identified by id 0 to match [ 409.281821][T15960] Cannot find set identified by id 0 to match 22:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="010000000000000005003b00004008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00010000080001006874"], 0x48}}, 0x0) 22:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept(r1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xfc, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x24, 0x34, @random="425eb48fc349f00ac1280c0a4b45680297717e298cd6950e041b4cf4ee63a7e7"}, @NL80211_ATTR_SSID={0x23, 0x34, @random="5c1497050cc488e6a4243ad2ddb11f361ba547acc858a3742b95bc9a640c42"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 22:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x0, @loopback}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept(r0, &(0x7f0000000640)=@phonet, &(0x7f00000008c0)=0x80) ioctl$int_in(r5, 0x5421, &(0x7f0000000900)=0x15) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=@deltaction={0x1b4, 0x31, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x98, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004012) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00ffffff7f0000001c00128009000100626f6e64100000000c00028005000c0000000000"], 0x3c}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="22003300b0000000ffffffffffff080211000000505050c57308659100"/43], 0x40}, 0x1, 0x0, 0x0, 0xebe71630892f4211}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xe7, "5a22ce1a97db8f3a530a15b2c452ba68c8dbb3a7ebd75e98e1556cb4edfe5bea6ebeb6b6d43b19290a5799f2cac0eabc452174f1d594072ef1a8e9328f317603c9b196f577020ba51866162dc485a3d0133cda672d63f8439110165ada78dc70a258ade2534efbc5b65cbe93001577651ef7ecffeb511cd9082cb99658b694eb7c2bd9e6632bda25a49f8dafc3e58857a60611ebae81f28b11bd5de1b9a663d53a63a2b05ffb04533434303d6037aaf8a0b27e0685e7b778c56de240b109b39dbaa34d3c164af0e43e537ab1cea75b8a2bbf932cc86d8e16d7249ac21a0f224615887f80ded8e6"}, &(0x7f00000002c0)=0xef) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000500)={r10, @in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x1, 0x9, 0x81, 0x9, 0x99}, &(0x7f0000000300)=0x98) 22:02:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 22:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf9bf, 0x20}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x40) 22:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fff, 0x8}}}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @val={0x10, 0x1, 0x23}}}]}, 0x50}}, 0x0) 22:02:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00010000080001006874"], 0x48}}, 0x0) 22:02:18 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x14300, 0x122) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000804) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC, @ANYBLOB="34fa0e59f28e4bdcb4d54ee5dbce106fbd8f107bfb8d9e1d65835082d963f56edcaa6d3a3d6abf89efb32753021b3dfd36", @ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x84) 22:02:18 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) pwritev2(r0, &(0x7f00000043c0)=[{&(0x7f0000002100)="0e", 0x1}], 0x1, 0x0, 0x0, 0x14) 22:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="0950c063e940000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00010000080001006874"], 0x48}}, 0x0) 22:02:19 executing program 0: ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000c0000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000140)) write$hidraw(r2, &(0x7f0000000100)="7b1840c638841c185c2e7e858da5a1b5525659b238a20ad93963b60d8b635f9910c1ca047fa02f17d96bfa3b6d82ca0676d1079a63fd37e8253fbfe93727c4", 0x3f) 22:02:19 executing program 3: connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) 22:02:19 executing program 5: write(0xffffffffffffffff, &(0x7f0000000000)="9f05efe899de5205754418d601288e8654ae7942", 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000b9b3ec1fb7bd2272a16405db602172ab8196e04077e0688932124b5ae1d6f4304dc05782f412ad3d64f86560f093cbc8ea226596afa58042ac55ec13a4737e5f20f28e0d219ae70e4bfb473a27f790e57bd47a1e5e4173924a4753899d2a52f36cb60e5d156b88bb2a1a5cf817463ae20e936e8ad87d0a0f2d566803d49f121f51590ca88e7ff100"/152, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r4, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x402c040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440)={0x100, 0x40, 0x10}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r10, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000002c0)={0x10000, 0x0, &(0x7f0000000280)=[r6, r7, r9, r10, r3]}, 0x5) 22:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8048c10}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x7c0, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb4d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @NL80211_ATTR_CSA_IES={0x30, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x3ff, 0x401, 0x2, 0x919, 0xf000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x0, 0x5fd, 0xff, 0xbaa]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0xfc74, 0x40, 0x8, 0xf4, 0x5, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x84}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd5}, @NL80211_ATTR_CSA_IES={0x710, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x1, 0x8001, 0x5, 0x6, 0x9, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x24b, 0x7f, [@perr={0x84, 0x108, {0x5, 0x10, [@not_ext={{}, @device_a, 0x3, "", 0x2}, @ext={{}, @device_a, 0x200, @device_b, 0x24}, @ext={{}, @broadcast, 0x9, @device_a, 0x18}, @ext={{}, @device_a, 0xa000000, @device_a, 0x25}, @not_ext={{}, @device_a, 0x2, "", 0x20}, @ext={{}, @broadcast, 0x3, @device_b, 0x2a}, @ext={{}, @device_b, 0x1, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x7fff, "", 0x3}, @ext={{}, @broadcast, 0x6, @broadcast, 0x1c}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x1e}, @not_ext={{}, @device_a, 0x5, "", 0x33}, @ext={{}, @device_b, 0x4, @device_b, 0x15}, @not_ext={{}, @device_b, 0x5, "", 0x31}, @not_ext={{}, @broadcast, 0x5, "", 0x28}, @not_ext={{}, @broadcast, 0x7f, "", 0x3}, @ext={{}, @device_a, 0x9ee9, @broadcast, 0x3b}]}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x8, @broadcast, 0x2, @broadcast, 0x9edc, 0x80, @device_a, 0x4}}, @mic={0x8c, 0x18, {0xde8, "420c33f426b1", @long="b65eff5a89a8f4d4c309dfb15d9b191e"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0xe7, {0xff, 0x5, "a5a273c52b4f297f210d33018fca0b7b", "942772a66a52d7e29a61ffe124c4e9f109d0d20772680a3060a18e36325df3c0", "5f88353d50f6d093a1391b69326a1cc044aeeb4c746518d99b9d4415bcb2552b", [{0x3, 0x24, "d9a82e4edd6425437a373a1dee21a21bb70a62a1990a433a7a968f13d5359556904a012f"}, {0x4, 0x21, "726d0135734e3dd03b9609721974a8f5d5058561f3fe54d64710c1306c621ecbaf"}, {0x2, 0x16, "f85613e94e24d3824836ca2860ed21f99ef8bb943248"}, {0x3, 0xb, "ab246a1aabee54800c5868"}, {0x4, 0x25, "b5545c112d3de6f4f894b8fd2a0ca332c31047868e1a05579a9285d2af2004efdddad4a543"}]}}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x2, 0x58, 0xc, 0x1ff}}]}, @NL80211_ATTR_IE={0x5b, 0x2a, [@link_id={0x65, 0x12, {@random="402b5cc39485", @device_a, @broadcast}}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x101, 0x89, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x5, 0x3}}, @mesh_chsw={0x76, 0x6, {0x6, 0x7, 0x1, 0xfff8}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x84, 0x8}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x38, 0x9}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x10b, 0x91, "273c63d7cfa50aa5333b438336cd0bb1fbc9c646a33524e70300c39adcacd973136efb8f39302f70dcc03cb7e4e6cf45e8a128418afa105495852a965f5885bdae45bd58ed64ed85c039a4521c9fac71c3a92e559b53b131911d837445abfafbd279f325228425020abb50a8b91f0272e937c8f4e65e4b906f4161f2e07de977fa105770135d4bc5f2a6386b71f8b2a7cd5db340a162631c089d9a716f03cd02b85ca220d91d5cc9c7e3e7a68671723814bde3f2b2c4d957b00fb29bd3af63e6aa44a8e7ac3484004dda9130c079ea05176255af50fac96e9c47f892eed12237386351a2e88ff6ab9b99cef382ce295888b7413b4b7334864eef85cd65158124156f41befcf812"}, @NL80211_ATTR_BEACON_HEAD={0x1f5, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="9edd45d5323a", {0x4}}, 0x8000, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0x7}, @val={0x5, 0xed, {0x1, 0xc7, 0x80, "6af92e488134b163e9feb3e560b74a0e151cfbd93b6ded6596c6dbf378b32c0a7ce9ee3244b8a15df0c7597e6804108330c5b6fabedecdd04bb69fa9b50dd6ec6c358a5282d24766bcd483e9e7b1cd35cc9af9b5c483d4b3e76fc20fd99ce43e9879e4400822fdac17ab1888539d3bcd2bab5923ebfa5cfcb636d461fef1a85a166f4c652edf50672b37efdfc42cacb4dd87a91ecf18c4bc03ab713e61b81e8bb193e90b263c003edef0eb53c0171f64b201298249875f88215a019596a6c96a6450b2a564a9e7cbc1945f6ef8e63873e4f5c6a27c2cbaded10b5ceaa1721d778e96a3730dccac9f0613"}}, @val={0x25, 0x3, {0x1, 0xb, 0x5}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x2, 0x0, {0x844, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x1000, 0x8}}, @void, @void, @val={0x76, 0x6, {0x9, 0x81, 0x1, 0x9}}, [{0xdd, 0xac, "14de4eefe9f89e54e7f0524f1789800545082bdeecfb854f16649951a74465cbf460b7b89025828ba8174b13de76503664c071c07a5be2a97075cbb64644edc59ec9d0597a953faa3c4e187021accdab1d37c708b1797c13f6fcd01aedf067b8de01cdb6f39a355b5583658f87e13c213ec02a26311116b0b208cd56d9c1ff229633e7cf54a06b1f04b83e4501366410a4040eb88bfc2e9fb3a6c027f9122ee22e18a9508044cb7b9ec01628"}]}}, @NL80211_ATTR_BEACON_HEAD={0x14f, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @broadcast, @initial, {0xb, 0x40}}, 0x1000, @random=0x8000, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa9}, @val={0x4, 0x6, {0xea, 0x1, 0xfff8}}, @val={0x6, 0x2, 0xc360}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xf0, 0xb1}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x3, 0x0, {0x40, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x7, 0x7}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x7, 0x19, 0x6a}}, [{0xdd, 0xa, "d4848e27d401c1bc8fb8"}, {0xdd, 0x6b, "695cf6e5eeb247605476967b11760dba67836b8cfc285211275c7877889380a0c10eea47ee06a32d52c4207defd416be77733c1da09b022deecf3d0c22a92d6d787dcdf3021fca143dc34f9a72aa575bd82bfc228d86172de4056dbe0cf186a87830ef41150f85606b670a"}, {0xdd, 0x63, "931dca0818b85feea2486cd122ec940563b5d5e933271be9b10c31461d4f0b5ae41dc1f0efe2b9ce1b1371680c05af4cd5dac6e84b8a4ff3fb52a1473153e2f5b052272cad39d79f2daaa311bb78798f11a426cf1cb1ec8a3ea8fedaeae0b7d670caad"}]}}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4e}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x10000810}, 0x40000c0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}}, 0x40004) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x24004000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="22c6e7b4254976fc0c80d0d17ab5f06540160000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRESDEC=r3], 0x40}}, 0x0) 22:02:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r1) 22:02:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x20000000) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) exit_group(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000400)="660f3806d1ba2100b0c4ee3e0f23f7f30fa7d80f0017d9b4d3000f01c9abbaf80c66b80bc5498d66efbafc0cb000eed8d3", 0x31}], 0x1, 0x0, 0x0, 0x0) socket(0xa, 0xa, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000280)={0x100003}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01a100000000000000003b00000000000300", @ANYRES32=r6, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRESHEX, @ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="22003300b0297600fcffff50505050505000aff4bd0000000100000000003b00001f0000dace86b16accd16bc48c6b"], 0x40}}, 0x0) 22:02:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000280)) 22:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x12) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000050c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="3970a1f5d332541ff5e6533395f7ab8367b082595820f60f72f50ae5d3d8866cf44cb85788c1e7525b49bd606a74cd638511687f9320bc4f5876b04aa7fb0db9348d57897fd716a68a6e6299968ecdefb30e2b029e606e18439708005100", @ANYRES32, @ANYBLOB="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"], 0x2644}, 0x1, 0x0, 0x0, 0x52}, 0x20068084) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r5, 0x1, 0x4000, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_FRAME={0xffffffffffffffb0, 0x33, @auth={@wo_ht, 0x0, 0x0, 0x0, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 22:02:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)=0xee) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x0, 0x13, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}}, 0x20040000) r5 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0xb1b46e37052ce515) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000240)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="40ec0000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) [ 410.722103][T16033] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000009280), 0x200a40, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000009380)={&(0x7f00000092c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009340)={&(0x7f0000009300)={0x10, 0x140a, 0x4, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 22:02:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="68024900", @ANYRES16=r1, @ANYBLOB="01000000001d660000003b003add080003007791f1093caf0c10774b9d922a0975316820a4eaff44ae10b386259cb9e95eb23044bec5ef230da2dd46a792ab4e1412056f2e80cdb170a9f84b499234ab9af0f89331967d34762518d654e144c095c03d", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) [ 410.957237][T16050] __nla_validate_parse: 9 callbacks suppressed [ 410.957258][T16050] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.980260][T16051] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:20 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fe10c5250600000016051d00b18a000014001f00fe80669cb27700000000000000000000000000aa050021ff0300000005000700"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x884) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0xa1ea9000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={@with_ht={{{}, {0x8}, @device_b, @device_a, @random="67c0fb097c1a", {0x8, 0x5}}, @ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x0, @void}}]}, 0x44}}, 0x0) 22:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 22:02:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x78, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0xffffffffffffffa0, 0x1, 0x61}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_VENDOR_DATA={0x2d, 0xc5, "90ce1841f8cc66159f4f3a164822cc1983f0b171cde4d5fb35f2cb30f573138ccb22fff6a9cf13d08a"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:20 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40180, 0x0) [ 411.321752][T16067] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x230, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x213, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void, [{0xdd, 0x71, "e1eb18c3fb77afa24257942d6f81352e80ab059a7bfa957fb457442df6758d6268b40ee174a8246b65cbbfb863e8849952fc92c050829f4841168794ad33ad38ab7a504abdb9e420626095ecd4e08b30b13b74d992e225939a965d3a88697ad0ab67e7e1a918153c99bde2916aee46a389"}, {0xdd, 0xaa, "f524e0b5af4ebb430fc1615d7841350182bb9c22cadec3e3eb8436ae0ca7ec46880254cad924bfd5b2f915e244b05256863b3156be4f25b03c0816485b57411f9ffea5c8a5c3183a5a16c694d2689dc751d1fb596bfd7748e162ba8e753bc1271ce7e3832beb2fffc52c82e0281f28d09d3970475e32278192e0ae111ff6bde004693be65f4248ba005a337379d02bdc7c379baf590207ff41e08dc2acd21ec2bd44d48c367dcc41e29d"}, {0xdd, 0xd0, "801b25dc82043c9d788f5767fede47cd749dded80daf0c6fb98bea6b0afbe163be7953145a523e2df4a7c2e1f36be2f9474be03e2bcbf80800b632d7785f6608a1c816d41a2ffa9d63c1b63bce88235737fee36a21994a4fc157a8a0c0ee9904351cf675c67a5bdb9d6ad482875008a0ba330c439182e28bb69062ee80790589b912a5280d86fec6e16c0690bcaa08896df44c2b9ce02e599f2bebb2276b6b61109f65aadcf587d862ccda0aad8dcade6a6ca231d6aab95f4caf144f6ff6a24a84d551bbd019cb15204d43e6f50d7969"}]}}]}, 0x230}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_open_dev$audion(&(0x7f0000000580), 0xffff, 0x84000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x444b, 0x2b}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "49a965c3204dd5d9ee184d863dadea459227f97fdfe12899"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8805}, 0x4000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="22003300b0000000ffffffffffff0802110000005050505050500000001a367a00010000000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0xfc, r4, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e8a8629c06"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f836be3574"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8516861ea784c274d4bd06715c"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "64e7bb7e55b2bdc2c008ff4252"}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "837e263d819b7ea1d1271a6604"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7492605b88"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5a998e7cb7"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x10, 0x4, "c1e58f71260d4e429e76d253"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "0c049d8f8dff9ef51c248a7d"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x558bd04d151c1825}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d27c59d79e"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x48d4) 22:02:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {0x7fe0}, @broadcast, @device_a, @random="8b5f771a0fcd"}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:20 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="66baf80cb8bc8a7881ef66bafc0c66b8410066efc4c2b998a30e0000000fe03ac4e1b5553366baa000b08aee66baf80cb84e724d8eef66bafc0c66edf20f7ce20f0f69059466baf80cb8e4e03a8bef66bafc0ced0f01c2", 0x57}], 0x1, 0x0, &(0x7f0000000180)=[@cstype0={0x4, 0x5}, @dstype3={0x7, 0x4}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x680001, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x61}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x983}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x101, 0x3b20, 0x1000, 0x4, 0x3ff, 0x9]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7f]}, @NL80211_ATTR_FRAME={0xd5, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_a, @device_b, @initial, {0x7, 0xfc}}, @ver_80211n={0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0x1, 0x0, 0xf, @void, [{0xdd, 0x86, "8a5535c60ee67bcdbfa89cf420130017077424e083e4e521bc56511b8c0157645c1adebf02acece456378a335377842080108e904593a9e22a757901b99eec483457e0583de5e22d7c634c9a06d1de01f958355fb83cbfabe043c167cedb02f9a8d691f8e7a195fc9daac23001f41a973b7b3090c6e7481d3c704e54baf84386a303f896b895"}, {0xdd, 0x25, "ead3b33d8d542714ce962ff33a301ea55044825c7e02d070257d5cb701beabc15666b0238a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000014}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xc000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48c5) 22:02:20 executing program 3: r0 = socket(0x10, 0x2, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) [ 411.650574][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x68, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0179c507bb9fb87975e777c15df4b25097569593c0ec57ff"}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000bbdd869000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b52b200000008000304", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0cd86c38c6d796e30096f208d7b444b54000", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x88, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x386}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x184}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8000]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x387}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:20 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10041, 0x0) [ 411.977144][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4890) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)={0x80000000, 0x0, 0x4, 0x1000, 0x448, {}, {0x5, 0x1, 0x6, 0x22, 0x4, 0x3, "3d4bbc72"}, 0x454c, 0x2, @fd=r3, 0x4, 0x0, r3}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "a3f3ab5af5b5cae86efc8cdfadc3b23931d1fed2e9cae4678279210797a40a72f8111ae72e609eda7db1a1c6350c58e5a4368de45a8300bc11b42d366ba28ad425aa3361d1c3f19a84812d9fd219e6ad43a9ddc5c2c86691dee635a23a1bbaf51b9c207e24dec1bd692ba477c33761bbbfa19fb2b94bd5317eebc779cbc510b91ae950f4a26b1d0062f5aa3a02350ca44539363e8bc49f3ccd7df16fd97f80a87f2fdf0b75409387ec64b5ed25aba25a3ef66c39d63d63b1b9cc29b374d55635ed9c264824c502f49180c64bd1380d024010b828e166bd2cae05b7f2d45857bee3affb07f64067bb86122c812c43ba95e4fd6f3a60e0550fbb606bf0febb2136", "8318a203aa3cdc173ed4487fa0ae3c5b809531dd6ba2b30b4724a65fcd0c0e05f8b442f70002b721ae5577eb72865f84169c16f76b39e98c84ec0a051bbbcc8ad1855ae05b48aa57c9cc698bf93f0d14d3a580e4b208b3abd7f0c95a2239840b5d1d42954ef49049f481cca259afde46ec775e332028711cd105711639938892b1ecdfa1fa1140c4bb695ca2eb1a26f3d04add9e777a95d2df17efbf5395df7d51460f0766025c5faae54a17f6371371ce11b755d6dce0cf2924c0a478fa2d7239484493aee871aaaea46dd9dde4c82ab5a59345fc7a6d35c0815c8e628ed0000fb7665220c406181f4596a6057fff124abffa810ea41d8817ab57b2dc016ce7832df9536b30b9a87797febdbead775c843dbb3954d762eb4108f69632d8209e41e3f430a6a8ee707d564c80dfa18c8c6bb379274c7b1e5052d9a2d0c2e2de1c06f9896a114f6d645a2d3b1af3ac285ec95cfcafaa8f5a90e81f7aa32eedea6809896f6853af9492599aa2028cf33756f42801aa18c81698e0988b3f9b6bc9c5754c1539b0d1c93852de5d57bb70216cec34ec9cb2af3f76305df330c8964d87c5933b7723f9a834a4f8fd9c03fd73a54019ada1e64d38ff9ac59f403292579196acd375bf0280579261857b631a9adf2b851e75119aafeb7573b526f4c634bccc21c293a8f224a738f68e00d49cc40e8cd456a31f9db575f19fc53e26355e0a888b53816d735a0aadc34db1f0d36ea6bdc191ab0c37596d1c4dee34ab5ad3c0804a40b0cbd49dadbc7915f8d74390487fa7a121dfac60e044d6ae0b648e9c9482ab1a34ae5ea89f7d969438b5c051187de74f992572ba5e62164f714dfbccac776c60a7ec86a79965309e1a516b496afe3b66da0b07badbb700f9700f9af9300b371f02accfe9c4ed5884fec5faf0df628b4380729a5e4d245de3781288faf3f1471548e55d0708439ae9ed6fd6ab212d4578ee80d7a580256e5220d68708d1c283affc9676962c806768f8ef11d84308f4e0f49d311f525c0478bf0febac4bcb0b261986515f6a54d116a0401aba0406aabf3a0e3dc403bf27b5e295b31915559bdbbda57cfd5f5b3cb6bb763aa62d1c40e1295e4d42832e6e67c6ab1d45a8ef015540937ee107128926cb187385896513903c2a38095e2f18087786a743a0ffe6fac1e5e5c47f26da7db38a63a1e7537c2c29d9cbe6c04ad448713a21a7d546773abac9df1a32f661d40e1ec55851e932a5b57e4e72e8a15bc7d0f2720a8a4ef36c0d83f97738320380d9119b2664e3855e6c7dca203c9e902846e0a417f6d9ebf655cfe0feb97b6078d7253ae7c450eef7bfd73fedef27be3d17db593fb5ab9caecb9d146aff1ac770df140ddefdf9c42dc7c4ac0e77c50ca60464b8d74e901e2d91c566697131b95b342f3157997fb8a7d9c8c5c88fc74702df368ea27f974221e333b67269fbbdc4b8df09585a2f023dc10bdd7c9725fa7ce94ecdcb3cdaf0b5a02cdfa5d5e5b4eacae045fd712d0d7666da4269577bc7af1b924c3052ab28a7382e4ee04254be19dc134ab6cf74568a1a5f9b5bb61eeb19a4e8e86d2972a7fe9a9c33d5948398863844a8c76597d72247f2234c367fe5957f69f286d89b29e3708a1cfc2f62b7539e1383ba8a32ef144bbae3dabb0fe00ee468ae30a910feb90cca26699ed233c8dd0732bd94dd28851cc78a3f61cfcad1c6d2f1e65e30b095e4467ed85320c6d88f8324c43df01277b9d258f021ff14377f790e3de93519c6d997ad70fccf4a0a6cfe549839d9d49ea02b24b48ecf15326ebc292449e094008c36cfce0b2ab13571b6e1afcfc41030a1bad93697d74edd9a3fe8da1bdddeffd337a10afdfe8ef36cfa2611d430bae452d14b3101d95d73f9b68c90c87c5326fdb839acbd299267f0354c5037fc6a62b576f2529f690aa0af902d600b6b4f142f965cfab6f2d5a78fde8f158a6953d15de8deb70402ea5f31568a50b766ec18b5c5d42b5fc0a6b0adf3ee7cecec2b660da8947b2c486b2eda455723ba702cb0fa317e6300958c9498470a9584263d2792d8b1e6b4721aa402ffae07030b17e34ffce2bc36c3a4d8f08c2b42d091d5661433b8677aaee797cb018dae12315c20fbb3499122247fee491ba073216e948544a3b7e90f8cf891ea11154a7225d0296e8029dd2fee47ec57a9a4ed7537d854d8cc24bff6c967c810caf5965a6b72dbcdb624d8515f472df2a71de6d3df0aa6c37f4618d009a5925725d175a1f25e4baab93abd63bb3591a22b0e261081242defc380c974052b729e7ed8cbe8791e4e966ce95c4d5c2dc27fb8e887900ea8111f0d12f420b16fbff65da9cbf07a1ef4fd3c8db49cb9ecb5407753fb7ec4dd53f2f72f2ba7266fc143fa234127159364945c88d6cfea61474225fc279811fb460f958c3482ecaf307d81b534082b25d8c3c6ad45694df952e9abc7139fdb2e5fd67249193b1b582341e21203defa7445f03130e7ca310285aa4ebc17e10145a8dadf8d05a003336457f74b4a831f28a04f6b0d55bb4355d6981cceaa279baaedf1f8c08badf9bf0dbf4990021d26cdbc9b57a477dfbca2f64c348e33876de32cad26a646d86697c7a700e5071beda6e43d71f043e81a141290acbe0b4e7591fe76ce6dc88c78eea34ecc505706a581b063bf918cf3253a9c287f2da790f8a9bf0870a281339c3ac702679204656f0d7b49c11810f3aea5dbba1c6e7efcaa5e71c6486e8f8dfa2ce66bcd081c78d2ebdb0c2ca4ed553a8d5ff78f4b5b3d927848db87ae283fd98b11d770860892e7262add6c90432658943e0e0c973f9d5cfc82c0a27db24854ac2ba973fc7e7a8cf4e324aa9ea8d9e1cc0617305efff00a6081ee84ac5c303560ddcb027276880db240d958438e9b2c98ccac618cd071c146bb780051c2c8d6e758d64624d2b63f7ef9e9d4b4f64e52d2b099ea8b6094f28ce2f053be1f26c6536ef7d9e3a164e48ddedff7b7c96b5755e0e248730676af72eb87f55bffcfe1acfe23a6f630301f9f007ea0ac9db7d364464cf2bac58fdff95a7c877e87565bee4a671d16881302d477762d48f4e07bca2c6f204e66e36f15d1fb8fdae8199940fd008c9210715af6082a0005d14bc28ccf117af3189d9dffdb9e8df619f280ac2bdecf5a33d45be00eb5c4e3fc846d9c0ac9c0f816163bf84538f060b1f595178a9bb8d887babc50fabf4e56196b340aeca2fc6f7b4358dfe6db54d645ce49a20f003b718614836ef5de775a7c47917da202c7290a888354c2d6668dc57a4a5d154e619594fb96990a812646bb10c128d0039d5ac3aee49e546b32edef11a7751492acee6a5b08387c13203b8950284bfebcb3f1c4a3aa8d67be6dfc57cd9ebcacd72e92f7259e50c256954b174225b7441bf2501ecbda0c91f83e2c5a9677e0238fdcf5d7eb5d9c94b121fe5d44f8513b7ff6509ef5f72f829d1c73205b7742722c552769548a535342ebd3c2032dabd1a9be97e08503586dd698c991493966da9c61d1fabd1f4d629a2f19ea3f2d1dd4ab0b77ea2c7d1be97e57461798be359e725cc45d8524b741075000545f9a71d2a70a37d532182e16422ddee413981b76b9aa18e74d2f33ec1380412c7f5ba99a9e4b96af188ccc4a7c8c9f9956d2a2541388d0bcf2aeae312e66aab41e0f896c22e5a133f0f81959acffd98e10bdedd244001cd450a2c7c3ff0adac7d1ddad8d44f1abde74bb8a2600c07d6bbeb00517012f2a79d155ea66c001fb9784656b680d63fe03b86c5ac9c3a85813ed2a7d8d8a40c5065e4ad3f665ad357bac69277a0e1b3c89ca773f8ce86f402523976649146297b58282d60f7955e6de78b05824ba9f5c9d19c675db499deaa2a3af2ccf77a0efc8002503d70e83358065ae7fb2cd562761d9b779caea18b76f452e7884f2c2948bed00f59116c74c269263eaa5bfc0c3a8cd9af6b2d1e13919eda098725f391aa9302820591748ff29a79f682df0adc3b6844c0ad1790a9933ac2c878769f87f6a0af89b810f60882406f2dd6c140b9ee6f8ebf4e6218f179f4a369a2525fb6d5bf041f2d8a8031945c31aa98fceb37b602c2f89a317d64fa81074ecaec8b677c061e2b1689e5a3cc4fd3b5308de2a39b2fd2618c0cd4dc676e2e27ab9c9a2f8fa9a5176dcf0096368d515fb812be40474ebfd9f3f28539d4622227dba26fc85989203f353ac24f8914d6f9623fd06273a5f0fea947c76adb37d345c2f534c96823c6989cc7194b52dc85bf448c2c8bebaa20db7fc163addccf845d20f8ec22e12be754c2aece975fb689769f77a436089831c8293ae8ae8a79ed4d517fae62a173220ee389da4a43d4798714231f61aa0ac8996f7f1e1da48630d7a048fc2a781d5d2afa40192f5d961c9013393e1e3abe826e11ad9557721e33c914fc9d969230bb02dfb3721e3773abb08412f5cd09f741e57350686e82cddde90633ae79bc88f5f1c9d235802cf04b90e8bfa5e658f4c2e2d2df53ef39297a0906690aee72b60ab5846277702e4866b4e9d9e6bd6e9f2b3ab22dcc9977325c2e83f8248b95417b3c09e49021a6e24d0afc2acd2daf9541c2af3132990b74153869752287ff9904a76ab95780e3119e89c6a9351504eee97334c74c9a8a25845e97e8987cf1d0476031da94bb58a361fc0e02acb4bf989fe01359a2d0e9993cfe17e5a12f8e30c592cfce895696157f6f98fb6568443dea8fc37d6884748ed7468e9e220be1bc6af61a47b27623ff7e2c0475ab62380384f9d99bcb9023b07d94ef3f6276dd0acddb8f8e1257b0985cde150108c8136be0162fedc713bd017d22e677b490500c894776f7e05b090cc460b8011fd9e2015993195a8bd8caffb8c41778379c86f88e7af3c8d7d62fa85740da5722f95e017549279d63f164c1b209073980bc7c62ae58c5326f50f5a8ecf52b6f2fda8e584a156d87599ab2be2107e777823923bdc0585c84d50ee8ef3945b65c28cda7c1fa80b44f95ceff01394a1660d8b4beaa064742355d7327eb853c714638dfcba1aa3b62b704692d8acb3d9e6dcaf63ddfc7c51ae5993be5b082af3df84814d58f3f7eda8729549e696b4254ddc4dd8c1ad67746ecc8bb610a3e1bd2ab1a1da61287dab77df58f35a85c9f14e0989c8e2f5857a8a8232b56bd270d1c93757b1f0ed2f716782cacd1ade5be5db373ba3b457ad3a00a381af836988145f5e95eab28a5e8c6950594d139d474a9b43b87e73f3c43e33289d96ed78fdc0d4596725b19669028991049f453617c4d67edb52a1904450ca9bb9b650082361c0d068ab3be5821b92da0e21ed391e338d9e8ec63845a03e79317769b0e4f09c78d5ddb3de6a09337a0641e3862e83fbec14aab83b2877ef33bbfb40755c623140d2e3753e9e"}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001440)={{r8, 0x2, 0x532, 0xa9b, 0x56, 0x4d, 0x800, 0xa7, 0x200, 0x3, 0x2, 0x9, 0x5, 0x8, 0xc6}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300e3f17b235ab61c3e51734e9235f9d844ba47d48c8d786123bad99e4099ac54810263cebd2efb6a696b7e50bc2d60c4ec9b314a99f553d6d2d34e746971f372395643173993179d15f365baa78308e18aa55b50e4bd0c8e13cab8710fda9d8fb5dd", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x4052, r3, 0xe1d7e000) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x8884) 22:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @in={0x2, 0x4e20, @empty}, @xdp={0x2c, 0x4, 0x0, 0x27}, 0x9461, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000900)='veth1_vlan\x00', 0x254, 0xffffffffffffff30, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7800780000000005000000034b19002c00660000070490787f000001000000000717cbac141436ffffffffac1414aaac1414bb7f00000101258ae35a589bbe7f2235f99138784eeeecad279b0e91cc1eb019d5b41fe50f7898078b935d5768248132bf743a33a4e90b99ac674ac16cb9ffacffd6140cfce373a7f904b3ba1a7f5577f69c8d55a01af3217f93479bc3cb56a9c3a2d42cc41f793245b6f012912cac5c115f1a4207f668018279182cc6f037059f7e0efc2a5d62db1030433241a18db50e678ef7e02d25f5648e1434118ea73d1b3f345d46cd9a245e1fea801c4805ebfacf2d89f50117496e10accc7f0b91578def9745fa9341221cce44edcbbbe182a8ee4b66a1af3677b0f42aaf8ec72d5b1d389874dee5637cc868a42bc076751e366eacc9"]}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x168, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0xf8, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0xdc, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @device_a, @from_mac, {0x5, 0x7}}, @ver_80211n={0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, @val={0x10, 0x1, 0xba}, [{0xdd, 0x48, "c3eb7f0b559f1dd2d9d2c96c3c06c4c70254f68238efdc451188a944fedeb7b7ebde716ee28b6709b01a6a2e76e4787232c8e7a4be9c2b6fe21c01cb3f20e87db32d187f6d32b1ec"}, {0xdd, 0x17, "a95cd2612bec83fe2ad7d95b62040f98debaaf301e1893"}, {0xdd, 0x13, "b149d659a8b0efbc494a9db6ccedbb5c390436"}, {0xdd, 0x39, "6588a93606f995b10d2c6713dfcaa54f79839463a95ad9741e287b2d219f6867ff6da464ae5f44904bd8c908b524bb42fcf02ebe352f964610"}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 22:02:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 22:02:21 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x14001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x23a4, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2e}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2976325adf35c7344063c0824defd778f146a5f5587bd09d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fba54f88abf42cad3d69f05f2c16f8009f8ad85826d01e0e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 412.292103][T16113] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.298732][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 22:02:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 22:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0xec, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31527fbf6a768e1bbe2f8803c082e7ed61b813a8cb5d1ad2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f2bb65766ef9be04fe7e8de7cd7e58a329736f0ec332426b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x40086}, 0x80) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x66f0}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20080) 22:02:21 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @can={0x1d, 0x0}, @can, @nfc={0x27, 0x0, 0x2, 0x3}, 0x401, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='veth0_macvtap\x00', 0x33, 0x2, 0x8}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000810) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:21 executing program 3: syz_emit_ethernet(0x410, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb8100020086dd6546d7a003d62f"], 0x0) 22:02:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x10010, r2, 0x2c17000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:21 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000080003005603f8f4bfc18a5dafb42f2e943a72da0ffe9d54846913453358d107bdfd4ec7defa5a1429da47c3fc4eaabf7684032fd0dec09c01ce036393afb06ba8ec62da1f3a4d8c92b6b4ab6306a8ee", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:21 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$alg(r0, 0x0, 0x0) 22:02:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1dc}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000fe4c5b31750843af26e577fc6374e2a01edbdf256c00000008100300", @ANYRES32=r6, @ANYBLOB="080022011e020000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x48010) r7 = accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x80, 0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x7c, r9, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 22:02:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa2}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x68}, 0x1, 0x0, 0x0, 0x8090}, 0x4048846) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e14f2c25cd2509965d73af793400", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250a00000005000800010000000c006e800400020004000100090007008f5131b17f00000011000700288466e09f9c3ec0be89d415a60000002800508005000200040000000800030001ac0f000800030001ac0f0009000100a6f0988415000000"], 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x240008c0) r3 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="080029bd700069c91cf1fcdbdf2503008000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x850) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 22:02:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x18, r1, 0x1, 0x4, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}}, 0x4004040) 22:02:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$P9_RLERRORu(r0, &(0x7f0000000080)={0x10, 0x7, 0x0, {{0x3, '(-)'}}}, 0x10) 22:02:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x4052, r5, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x120}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 22:02:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="228fc4027e0d52d8f87c615cbca19b8b", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x6}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x48001) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000002300000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="dd97b9a862e231477501a74f2582fc609c03fc62f0d7bafc56782649767390f54d3fa35a04c7d323227f107ff593d664dd169411070000b600a6e0faf0f050798e1375b995b4e590e20e4d", @ANYRES16=r1, @ANYBLOB="010000000000000000e03b00000008000300c137a2fddb063c7ad81a", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:22 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$P9_RLERRORu(r0, 0x0, 0x0) 22:02:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:22 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000005c0)=""/138, 0x8a}], 0x4, &(0x7f0000000340)=""/16, 0x10}, 0x6}, {{&(0x7f0000000680), 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/199, 0xc7}, {&(0x7f0000001840)=""/223, 0xdf}, {&(0x7f0000001940)=""/125, 0x7d}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/255, 0xff}, {&(0x7f0000002ac0)=""/201, 0xc9}], 0x8, &(0x7f0000002c40)=""/53, 0x35}, 0x8}, {{&(0x7f0000002c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d00)=""/9, 0x9}, {&(0x7f0000002d40)=""/20, 0x14}, {&(0x7f0000003b40)=""/178, 0xb2}, {&(0x7f0000002e40)=""/240, 0xf0}], 0x4}, 0x1}, {{&(0x7f0000002f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002d80)=""/174, 0xae}], 0x1, &(0x7f0000003100)=""/208, 0xd0}, 0x20}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/189, 0xbd}, {&(0x7f00000032c0)=""/77, 0x4d}, {&(0x7f0000003340)=""/85, 0x55}, {&(0x7f00000033c0)=""/109, 0x6d}, {&(0x7f0000003440)=""/163, 0xa3}, {&(0x7f0000003500)=""/97, 0x61}, {&(0x7f0000003580)=""/107, 0x6b}, {&(0x7f0000003600)=""/144, 0x90}, {&(0x7f00000036c0)=""/230, 0xe6}], 0x9, &(0x7f0000003880)=""/247, 0xf7}, 0x81}], 0x5, 0x40, &(0x7f0000003ac0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xd}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x4d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000884) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) open(&(0x7f0000003b00)='./bus\x00', 0x20400, 0x40) 22:02:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f0000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x8f, 0x7ff, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, 0x7, 0x8, 0x10000, 0x8}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x310, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9a}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x14000}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0xc004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:23 executing program 3: syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x60081) 22:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8001, 0x7}}}}, [@NL80211_ATTR_FRAME={0x37, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x1, 0x4}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @tdls_disc_req={0xc, 0xa, {0x1, {0x65, 0x12, {@initial, @device_b, @broadcast}}}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="189626af090b", {0x0, 0xa1e}}, @ver_80211n={0x0, 0x7288, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x10, {0x7aa, "4f9074595099", @short="7ae57441de279741"}}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 414.242440][T16210] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001540), 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="40d7e08f1322bf2900b812413eb0b40da80016630f8ff7e86ca4766b16de6e", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="ba20d9de158b34f7b0c51e19977e3a605412ecdfac1164540419200ce5b522b5308d14ce0762aa104a466df81259e591ceb2999d644bec40d29b5cf633ef40aa82908955db987b692017b513225c107f2464842aad45bf86506e63616e19ceccaa7afe6a62130da470b6e0a268cc1edee4eaa445f6dc7714cabdc65a357b8584ec8ba21e99146aa344ee5c7e0bff0ae8261ecc81f25c411f3bd72387fc0453d4418affae61ed6f4cec9e53e5cbc70646f82f5c65525f63b71c9063222222fa3c44e3b32fd7ffddce98ba", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0x60, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x4}}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000847}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x204, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 22:02:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f0000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:23 executing program 3: ftruncate(0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) getpeername$inet(0xffffffffffffff9c, 0x0, 0x0) 22:02:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) 22:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000005e3cba00", @ANYRES32=r2, @ANYBLOB="22003300b00000421affffffffff0802130000005050505050946f697c4c4f950e641af650005fc88b9a5e72a198005b6d30d8de021e07e6d29628b77bf715358d34daa7543cf8d0870787543919215379a0126cfe6bef48e09fbab034c339862c1298f2a0ab560416d2cd267bfbcec822f34cb056e391c8e82bfbbb253d895a"], 0x40}}, 0x0) 22:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x40, r1, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {0x23}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 414.559863][T16226] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="220033f9af000000ffffffffffff08021100000050505050c6380e51c08c80505000000000010000000000"], 0x40}}, 0x0) 22:02:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f0000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000004c0)="eb3c906d6b66732e66617400020101000240040000f8016c9fd626f2ca89327904cbedb84090144bc4a0eefa64f35061b23f403d2df7a4c7975f22c3459cc55c5cce66825ed55d284db20f93461a01c70ab033c9f062a537415ff097f729bb7c11e4e97a4358546e0de8f101bcea3f46003d3bc13ec50e2a9aae8ec6f65b18236483b34d81569c8a361291706b4947ffc277aa644a82f18cd6e7bb81cdafbcba214a830e8a4c8a01a06768d04916e97133ffdbc84fa5d5f072dbe534b79778fa6226b79adbc2a1adac124d497632b80ada1d19232a6cdcbf59853ba60e8df535bd98c206dd4b3abf0ec534488d2e15948eed362a7b9022415da17b91da8797988d1e7a1dd2bf441195e1f54c4e552762416f09dc343d4483cc6c4846a382daf2ee1bc15becc6f17c891c7bbb9681347ee60984261760d3c212d91e8bbe33192e4f761963f86669503222b47e5a06f460b38b5d3088a0b122eeb66c387c4bb14095be0c1b4dc9c1dd28ce1a31d40921d0ec8acce1540672193dbdaae322cd1a4a695dccff80ae99cc25d7edd1ffc4e5cf690d13c3246a03774f120ba8eb4344714e86e5dd7295afa33388d97d14c958f6a8d0ccec65e4e74960f2f6e0b5c1a1600da8b7a857188f959a54d3813e35bface2ae79aedbe54cc01f903cb8472bb723a86ea6356ac8a9fbcd8a3564f21729df7257d06cbee81a94495938ce97fe7c03", 0x200}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='allow_utime=0']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b009742b745aa3b1bdad1eba92a54001bd8c484c6e96438618b9997f7eed5e74013d14fc8de15f70172e79fad57c3b4c1826d860ce42d2d7fc8dae8af020f7313fc798fce6049d9701452d6974c62cc4cd9e4170c0c3f306042bdb8a1fb0261d7f0d7db1f62d570bbf34d722d04608d05cd4cd011eec35bbb1a66fdc8cf1c72805920c400cf002f025d33ee21917841576f5c24f24856e57dc13d1de441c4fe36265a6bd8f4f0c8870000005764e8cbd65188b4bbc420862f6ada1cc5ab0ecb2d972e74b439efff6ec61745291187a55a87c074c24636b7e4a9d75cb87625264df1170d6fce79eb00000000", @ANYRES32=r4, @ANYBLOB="22003300b0008000fffffffbefffff0311000000505050505050000000c8a18aa65a5f03"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 22:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000080", @ANYRES16=r3, @ANYBLOB="010000000000fcffffff3b00000008000300", @ANYRES32=r1, @ANYBLOB="08005700b20f00000500180125000000080022010d020000050018011e0000000500180114000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 414.891397][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) [ 415.055103][T16251] loop1: detected capacity change from 0 to 1 22:02:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x102, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 22:02:24 executing program 3: semctl$SETALL(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000b00)=[0x0]) [ 415.204002][T16251] FAT-fs (loop1): count of clusters too big (7078142) 22:02:24 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1f}, @NL80211_ATTR_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x218, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x30, 0x24, 0x36, 0x4e, 0x6c, 0x1, 0x3, 0x3, 0x5, 0x4, 0x0, 0x6c, 0xc, 0x18, 0x5, 0xb, 0x24, 0x36, 0x4, 0x18, 0x4, 0x48, 0x28, 0x48, 0x1, 0x12, 0x12, 0x4, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x6}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x7}, {0x5, 0x1}, {0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x69, 0x1b, 0x2, 0x24, 0x1b, 0x14, 0x6, 0x18, 0x12, 0x4, 0x16, 0x3, 0x12, 0x67, 0x60, 0x48, 0xb]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x9, 0x0, 0xb, 0x6, 0x60, 0x36, 0x1b, 0x24, 0x3, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0x63f6, 0x8, 0x1000, 0x7, 0x0, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe511, 0x9, 0xfff, 0x4, 0x7ff, 0x2, 0x73de]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x680, 0x3ff, 0x81, 0x0, 0x802, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c6e, 0xe00, 0x200, 0xffff, 0xa35e, 0x8, 0x400, 0x9]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0xa}, {0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6b, 0x4]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x1b, 0x30, 0xb, 0x24, 0x3, 0x3, 0xc, 0x5, 0x2, 0x4, 0x5, 0x1, 0x12, 0x12, 0x24, 0x3, 0x36, 0x18, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x38f, 0xf51d, 0x94c, 0x6, 0xfff, 0x0, 0x800]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x5e, 0x6, 0x9, 0x12, 0x48, 0xb, 0x3, 0x3]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x8}, {0x2, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0x6}, {0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x9}, {0x1}, {0x4}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x3}, {0x2}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x80, 0x3f, 0xfffd, 0x3, 0x25bd, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x18, 0x60, 0x4, 0x60, 0x12, 0x30, 0x30, 0x12, 0x2, 0x48, 0x6c, 0x12, 0xc, 0x6, 0x5a, 0x2, 0x1, 0x24, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1ff, 0x6, 0xff, 0x5, 0x619, 0x200, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xac14, 0x1, 0x5, 0x654, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x53, 0xb4, 0x7, 0x81, 0xff36, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x6, 0xe6, 0x4, 0x0, 0x6, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xf890, 0x1, 0xff, 0x7, 0x7fff, 0x8, 0x3]}}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x2c051) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) [ 415.266507][T16251] FAT-fs (loop1): Can't find a valid FAT filesystem 22:02:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) [ 415.363686][T16251] loop1: detected capacity change from 0 to 1 22:02:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x963}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) acct(&(0x7f00000004c0)='./bus\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1f}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004045}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x88, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4eb16517b620"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0xc3161356e02076a4) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x32}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1f}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x28000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0xf0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0xd1, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xfa0}, @device_b, @device_b, @initial, {0xe, 0x6}}, @ver_80211n={0x0, 0xe0, 0x1, 0x3}}, 0x5, @default, 0x180, @void, @void, @val={0x3, 0x1, 0xb7}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x80, 0x24, 0xa}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x2, 0x0, {0x40, 0x40, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x9, 0x3}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1}}, @val={0x76, 0x6, {0x1, 0x1, 0x40, 0x8}}, [{0xdd, 0x45, "c2870900fff034533b61aed91aba527f3265d23d0313f97d0cbf6e86360805c72a32657296a681825e3d690ca344b9f9df50d097514b572dd048838816c9fcff42a00a2200"}, {0xdd, 0x23, "31273e5809a0fe48e31eec326e0cea7c53105608fc0bf1aa2adbca7d7dff51576644d5"}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x60, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2ba2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x492}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xbf}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000010) 22:02:24 executing program 3: ftruncate(0xffffffffffffffff, 0x0) 22:02:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x62, @void}}]}, 0x40}}, 0x0) 22:02:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "37083aaf771668f5499831264d"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "0108544cb29d42a53118"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2c04c090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) [ 415.806812][T16287] Process accounting resumed 22:02:24 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fff, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20048801) 22:02:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000100000003b00000008000300", @ANYRES32=r2, @ANYBLOB="abd7f21af32f1d51c5f6981fb78213e77dd83f4e07585e588783e959d390ac8323e7be576c8b692e15603e0a21fcb03a"], 0x1c}}, 0x0) [ 415.961159][T16287] Process accounting resumed 22:02:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @initial, {0x6, 0xafc}}, @ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x0, @void}}]}, 0x44}}, 0x0) 22:02:24 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x800) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000400)={0xd, 0xb, 0x6, 0x5, 0xb, 0x4b3f, 0x6, 0x3d, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xfb9335abb38c3ea8, 0x810, r0, 0x4a568000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRES32=r3, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4c010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8df}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x25) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @rc={0x1f, @none, 0x45}, @can, @in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x3, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000280)='team_slave_0\x00', 0x40, 0x3f, 0x6}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1100249a0000000000003b000000080009ad1515bc519b54bfcc40e1a40300", @ANYRES32=r3, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x20040004) [ 415.981681][T16296] __nla_validate_parse: 4 callbacks suppressed [ 415.981701][T16296] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:25 executing program 3: socketpair(0x11, 0x3, 0x3, &(0x7f0000000180)) 22:02:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/18, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x40}}, 0x0) 22:02:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x68) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240c0804}, 0x4000000) 22:02:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x2b0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x291, 0x33, @reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_b, @device_a, @from_mac=@broadcast, {0x7, 0x960}}, 0x200, 0x3, @broadcast, {0x0, 0x1c, @random="60c0375a24191dd5c3db055404df4786444a1cc2a865e67dd3e67df7"}, @void, @void, [{0xdd, 0x68, "c43dea22f0e27e41210e9649f67fa9b30cd58ad0da4ef73d8461564ef0881e62549b5e53518d1abb00d8a90d9468a7dd0749d23b1af7faba8c520c1d9ac478c8649ab4ab799a37fb1ee73eacb7ff9ca0070aa050081e4e9f3fbec4fb23290f5b6eb05b3bca128835"}, {0xdd, 0x57, "fbcaaa0d47327253c5c9a58f74c457eaf5d739bec9977a62a9ffca94e432d1353f807a9e761cf4f22fa53382be873b1c7412d2a8ce958fc2571d21a8f3c820fc493c320ef0d159d87719fc064019341ef5bb3dacd1f7a8"}, {0xdd, 0x7f, "5c55a66f072976384087b96c64899a0562bc2ff1054a630ea5167c7b4356bb410bc982de3052113e309ff73a50c2e7171eed0398d0c83a8d9de28938bdc675bed7c500188b7d40619191ce09af01d4715ea37e9c2f9824ce0bb8124fe951e6adda11462776774024283fef305006509af7395632e72398d12ef3cc877a2295"}, {0xdd, 0x9a, "3d25cd4c2455d6c30a50cab66efc4f82101f06b72f4b482c4b110aec5069e492f772428e29bcec9a632837a6da2f5882c7e0daa53880782f325b03d54352c5f067ecc065b33c16d6a5cff7b58d54aa0142abab12354c1d75f6322a5b534622c588329563400f863629e30859cd62210154f9175e518247ca39e7a53ee5f441b35cb0e5bd154f6090993707eb501d6257c1345a2546d677b428d0"}, {0xdd, 0x6b, "886202266be81624f03baf9343ab778ddbab6cef6749577312b0e55381100461b2b432938f7ed479d4ed5e19e45dd6e34b81b3ca551d6bc4c7a5dcae91b114e7524544207546386d05a1a5cddd76a2b9fcbb5d2de1388e6512e986191bf5b8bc2f834b864b5e911cb84dbb"}]}}]}, 0x2b0}}, 0x0) r3 = dup(r0) r4 = accept4$x25(r3, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80800) sendmsg$sock(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="29f699094422050395af849f3510639393a621a1b6ac59871d5db8f54cc8ae7490b781be56c261a08840a02822d27e93a3054f5e48121a4c194a0f743626c0aa47121c1e21113331e4c4c63e3c5e334acc96b1e1c069deddcfdb1d87", 0x5c}, {&(0x7f00000002c0)="991eb99bd7f41afcc43dd4afe299400629a6e0ba", 0x14}, {&(0x7f0000000400)="591f90c8af15170f2c1fb2a31591d183e4653ff2e26da273bed1183e34213c991045a1b5156f4fa7d59b9baa658e21b8eb3a0d60d043f7933ee1f08a6e83eb02b28ce48d2fc81fa2583748e77d532f588b9028a88d1b9c51e9976c47d52e3bc0dcdbd176a8f26724520f93a12bc2eb00817ebccd7beba338194f17ab25b2f81fca2705", 0x83}, {&(0x7f00000004c0)="f335a49fe5c3366b21fb7916ebb7fc935320c5c86baf2cc2ed4c7bd365b7b0d8994c6fb415db705a895beb3e7b5f1114a53285c3c3f0471bf65dadb1beeb97615c7df8c56a1bba772fbd021dd47c4c35e01e3ce49a82c2af62cc89c10d9031b6a586b5a65c7d7c0562d06e3f8f830eb017622c8e6e0b17b4bb51f1e010bf877a38b7abcaf04bbc69f379984171d50cd08b5e4899245348e36e48269d61fb50104edb0124e302c44d3c3251cc7425019cbbae39f154e866c2c57037e924efe184ccdfd98c0b834842dc35211c987b090e5c1a86ef95c76a16e6aeeaa4614f248a632d45ff8c9e531e372fc79bb7ea9269a46aee", 0xf3}, {&(0x7f0000000300)="3a698b90fad66cc29f41de60d3cdfa91465cad170708d4bd95b794fb3243efeee1840a61ba3d110ee10beec1d0200336c1b5f8eeef99f9913dfb86705f97b0a66b6d06c4c6f2c9ff1589c8410d1b12d01a702f900e", 0x55}, {&(0x7f00000005c0)="3322f3c6169e85df0a8b95f2629854de9dd798687a66da338c07d268cf1e70912f66c60919494d7e1f32b2bb588b9d47785a78c5d6bc45efca6d761cf27a20b0e8aa4db74a4fd040aa047c0dc5b28b814a42f64b098fac417269f5a27a0a61283a8d6e8226cebb95e385b71a0f20a8", 0x6f}, {&(0x7f00000009c0)="f4cf4857abefbf5addc23575bed4d17ac5d2087f6dc6e50fc63655b1e44790211d88393892ab583c9aca132a9644bdc7fe22fe5e3dc0bf90b847746850cd5ae21179058a79e8e45c2277cb08373c0696d51c42c3586815315f60a3eb960385b45aec327a2b6c4211dd96f1e3e69e2a7d5dd8583c68d964fc76d5cac00fa283a51fd880f238dc68566d874383c045ebb9c2e19124c63782128ffab8142ee76326579765fc62bb4a2b870e084d505072f0f75d31e61507f67a534e3b35d5216ac9b335be2f24bdd8a88e9dfad3eaaf5c1e8cfe8999ac8d0bc0cb24ceb065b8124527457cb46a", 0xe5}, {&(0x7f0000000ac0)="c27f2b9a2ed8b62a603230a3126ef1d4367e64879a93dee0132429834c379b4556255a9ea4b642c348215eb662c2a47aaccea24635464e0931709df9cb292fd8895e77c787f1171b7f65225e8cdb8ec784c0687526e7550ca30046e260020efbc30914e88e516a15904a6b5a72dfaaa9cd5960eff718c0d276aea94d47a0aaf167807d3b669f11e2cee0dcc842968329bfc83a53330a298daba3d7e5dabcf79c2b3d7082aba20b270f0ea702487345f4e7685eaf455f86c91995af8bb60c94302a97028cd2c39ef8218adb55ea4340558c424b1a5c325b60b2c8", 0xda}, {&(0x7f0000000bc0)="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", 0x1000}], 0x9}, 0x40) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xffffffff, 0x5, 0xe6d, 0xfffffffb]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffff80}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x239}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) [ 416.333657][T16315] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x500, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2da0, 0x1d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40000c4) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = socket(0x0, 0x3, 0xffffff00) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffff445, 0x62}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8b}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:25 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 22:02:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/18, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 22:02:25 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd4ee0089e3509539}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x144, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x6c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xd8c}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="7cb7"}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@preq={0x82, 0x46, @not_ext={{0x1, 0x0, 0x1}, 0x2, 0x8, 0xffff, @device_b, 0x8, "", 0x1ff, 0x401, 0x4, [{{0x1, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x1f}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @val=0xfff, @void, @val="82ebe6c1fdcc68809cbf371fd79ad95a"}}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@mic={0x8c, 0x18, {0xaaf, "e2b1716dd267", @long="52dde141514660f7d98383228703d79c"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @chsw_timing={0x68, 0x4, {0x6, 0x6}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x4001) [ 416.688139][T16336] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6a99aa0f", @ANYRES16=r1, @ANYBLOB="010000000000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/18, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x41) accept(r0, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) [ 416.908753][ T1265] usb 4-1: new high-speed USB device number 8 using dummy_hcd 22:02:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'veth0\x00', 0x3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3bc3eb2000000800030000000000000000000200", @ANYRES32=r2, @ANYBLOB="22003300b000b989ffffffffffff08021100000050505050505000000000010000002000"], 0x40}}, 0x0) 22:02:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000923322eae7c8b47cbe25d8408973134cd6615a1e39fd91", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000000d68e5552f00bc5f04d2ae5b08116a30137836a0f1d2626d4682e836010100001ea35e7fabd4ca14bc01b84a317f1ad5ec660f1ef136672e78e1bc16a4540b4154d9cac6a0b9f16cf30e15301f4233dfa62b91baef6b722b0e0933583f3363188b446efbb9b46da5cc9b3ea694aeb529c70512706aedee81ff056f3c2e249329d68a8962209a0b01ef349e2165ce3da35180673d32e1829b3614733003b7e32e1d55cae3f596fd3f57e45333e5a07ff85e24aac43d977b393b267ac4b6d4c9e31daae81491c4a4ad5bcdcc8f100c4ba6cdbc72f4d20a40e3017185841bbe5e1c275517fcbc501b102349c8", @ANYBLOB="a24d54d5ea6d114f173902a53212c3a449be2c91512b36e41ca528208b1b3e7884e117b2e96ac46ffe9b5118f99467ad6caf0896dc03a17d1c335bc30cc40436d9a0ed914819dad5239e15fd340bb902c399157b5ae42347c0878ebc3e841eb051713967c935d05816aedf179e1767361e2b737e7338383880b99bfee63addd81b7233046b0362bc3ccec27154632ff042ad5bd5b7b81b65021e7fc33966b0fc42ccfa95bd191194325c30fba724362651961af8bc458882c57f6d5b562028652f8f596dbeef84d5bb38b88f1b55a7c0308d9dc428faab", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) [ 416.979009][T16352] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/19, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) [ 417.128635][ T1265] usb 4-1: device descriptor read/64, error 18 [ 417.253775][T16365] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 417.418592][ T1265] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 417.618812][ T1265] usb 4-1: device descriptor read/64, error 18 [ 417.759432][ T1265] usb usb4-port1: attempt power cycle [ 418.178695][ T1265] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 418.269394][ T1265] usb 4-1: Invalid ep0 maxpacket: 0 [ 418.436639][ T1265] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 418.569237][ T1265] usb 4-1: Invalid ep0 maxpacket: 0 [ 418.579722][ T1265] usb usb4-port1: unable to enumerate USB device 22:02:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 22:02:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x600000, 0x144) r3 = pidfd_getfd(r2, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x48, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x738}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x820) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x621, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9ead98c31f6206cfaa4f08d4eb1dbad9cf34b76a1a7c72f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f2981aaacaa6426a0cb4b916da9f2d60bc9599903922fd94"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x910, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4081) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x101, 0x33}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 22:02:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/19, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x67}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 419.623913][T16385] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000024000b0f00"/19, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0001000008000100687462"], 0x48}}, 0x0) 22:02:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r1, 0x400, 0x70bd29, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 22:02:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000340)={0x83, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22413300b0000000ffffffffff7f08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) open(&(0x7f0000000040)='./bus\x00', 0x800, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x31, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac=@broadcast, {0x5, 0x2}}, @sp_mp_confirm={0xf, 0x2, {0x4546, @random=0xeafe, {0x1, 0x5, [{0x18}, {0x1b}, {0x18}, {0x16}, {0x24, 0x1}]}, @val={0x72, 0x6}, @void}}}}]}, 0x50}}, 0x0) 22:02:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_PMKID={0x14, 0x55, "ac61d58bafc796ec03fe88850ac57c72"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8041) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) [ 419.971808][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.014506][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2000000000092, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x541b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2200148954fdff0300000000000050000000000100"/36], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88440}, 0x48800) [ 420.111787][ T26] audit: type=1804 audit(1630533749.038:7): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir928675031/syzkaller.SgE27e/413/bus" dev="sda1" ino=15147 res=1 errno=0 22:02:29 executing program 2: syz_open_dev$hidraw(0x0, 0x0, 0x0) 22:02:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="2f48f1592bda3c28701804c390cb45a2b4441755b5184576fc5ebbb86f8b234bbe68f75be9eba0a334444ec6a50681955cf3cac53c625429bfd923a595cd504095fe1c7184c59bc6f5b50165e3bbeee1e1e2ffb6", 0x54}, {&(0x7f0000000040)="9d6f3056763320e7", 0x8}, {&(0x7f0000000400)="50dbdba389818c42934c6b5c01635a633ca12bc3f28d0c90d7d2a7fb0aa0bbefa43c802d898e77451faf58ec87d63d0d9edb3e37a7226d6abef4e6b6b5a32ae534b82f8d10c33b7a2c70ece3fbe0b5083e5cc874e8d22c7f44d7ccfeb66d930b80bfc80d88a3ed17ab965b2048a67daf0386ff79aa669ec6e32e4b5d1c629058f13110d170df79ecb1b4d99431eff676e5b472473117865c3503a2611ce641597ef6faef9b554997b195dee4d94e3a9bb0dc3ffde4ece0948a3e67bd62f415b185d919fe197b8da5fa5b17f92f3badf9be7a", 0xd2}, {&(0x7f0000000500)="dca972878aa414665e7ba76971c9c3717ac9901cbb6584bbd24a41c7d0e09578958f8f07a638dad01acab51fbcb1a4a839ce889d51d61488e84875ab65a44b72025efc5aaf94509a99d710e3418e4cb13cd27a0cfde8929ad28ca55758074661f4b7d1428467fa699663019b00f9c2ed241d99dca7e9eaa3fab38df16f4de182c665ccd9a902b0fa5721b7a4cba236da2664ebeb89c93a66", 0x98}, {&(0x7f00000005c0)="230f04f77fc294c1110d561934ddb9c1884c1d994dfe3e27c08576f8e65f6e8aa7f9928c60f140b6eddbc5497b3ec7014cdcee38acc3854df55373e0d1f08c0840750a9fb3ea5e081fdccc2be2f8028d775ae895dca6338a85fd0664871c37da33e315cb60dd236bcd6d79ca0e2452e4e0ccab622c6a0a62998f6c709399e5aa10779ed6ec8cea8b42765fecd8eb1a3b9bf2aa1dbde8ae935298727d7d845fe10ad5d4f61aa5978a410cddfa6046513fd1955144efa747adc2ffb515e5f78ca2d620a4", 0xc3}, {&(0x7f0000000300)="16f520a1ca39d32fd1a917dc1da30d57aab937254056db4b7862b79bf701605d5473100fc8d14c70cc0369cc12d7620e08f8184406031355ba5e58cf8e95c4e6b63bbd9385d3da22160e00a33d8d85f707b47169fadeef72ea579cc783c4bbbb69fd1ba73b2b9b1044a242d687a34f9c", 0x70}, {&(0x7f0000000200)="d9bfc12a3147055d1451d60ad842c924c251294e64fb0cc708829342a102099e7bfc14d15fa706", 0x27}, {&(0x7f00000006c0)="93fc7b6c17b8d15b22c61775280b44b585aad9cad51fa601abba049a37985213dc7ab3c73f663cf18957d5f364a00a67392c35239b20215b393a1387ca18daf08e099e7d38d2ba55d5729236e4bb24d4ed72a84a91e559060d360d400fba15bde9209919ce3766131c74609ef5139fe3165c400032b18526860b1e719879f77296399ce6b2606f001070a600981e683fa03a2ee5f2c5e62450ba95e578690d1884d9c10a62a7ac94a09ceb669d9fe71c40d19761c339a62620a667c86e6708e99f823dc84a39d963637453738558958971e9d954", 0xd4}], 0x8, &(0x7f0000000840)=[{0xc8, 0x101, 0x8001, "684517298aba184be8ebd1004b2cfc6fc32e53edfcb850b7281e1bcb000155d7631417f59431f18b213053311121923ba22d9c2fc9418134a11c219ed01577eb90b8b1e5f07dea8205e614878bc0a00000bc93da1dc379e3dd33d9aaa91b248b3d4378ec4c3d323da0ff250170cc353c280335d81edcf1aa6d69c8d0ef34cb961318ff5f23153189f120dc6678ea542bfcb25ea4d7a7b65a0aae6db276cfa247cb43a81171fe7125590c8b2414307fe730394ad3"}], 0xc8}, 0x20000810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="010000000002000000003b000000080003003d698a17fb1c99533ab0983f361475e0f509753a130f82645f607ba1e7f614a5c44f08be882a364dfd1eb452dcaa0c56dfc247aaf0725302d97842c4825e3bb162c4a7de27", @ANYRES64=r3, @ANYRESOCT], 0x40}}, 0x0) 22:02:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x976, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x50}, 0x1, 0x0, 0x0, 0x200408c0}, 0x48880) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r4 = openat2(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000680)={0xc82, 0x20, 0x10}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x401, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x20040000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x21c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "443cc14b40f5ab8d89a3aa6a63134d7bce7b0db793c337f87b79ca"}}, @TIPC_NLA_NODE_ID={0x51, 0x3, "3ca4b93182af5c34ba52edb69cea0f8af92c6a42c55809fbf84041db745c114d9227ef72c98d5f49807f931171f7b1b793ab009bf29991631fa4026567c4093a1b11b7e9748efc82cf925d89c3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "c9263107190b6a7d42e738f836dd72d04d6b842b4dd3224666a5f8e758e767d2e460b907b9b5bd01139b6f39336ddecbe72f446c7e4951b7cbbc"}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x891}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfeb3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x835a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65e5453}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 22:02:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) [ 420.272968][ T26] audit: type=1804 audit(1630533749.108:8): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir928675031/syzkaller.SgE27e/413/bus" dev="sda1" ino=15147 res=1 errno=0 22:02:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x400445a0, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x28, 0x6a, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040c0) 22:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) 22:02:29 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x113) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xbd0df7ff51f26c7b, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c706f73697861636c2c64656275673d30783030303030303030303030303030825cbffbad979e0e98945c4439302c6d73695d653d3078303030303030303030303030303030352c64666c747569643d", @ANYRESHEX, @ANYBLOB=',hash,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC, @ANYBLOB=',smackfshat=),dont_hash,subj_type=wlan0\x00,\x00']) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:29 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) 22:02:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="be44c99284077f6443dff958773b3c0000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000022003300b0000000ffffffffffff08021100000050505050505000"/50], 0x38}}, 0x0) 22:02:29 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x70, 0x20, 0x3340, 0x71c, 0xbf15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf9, 0x86, 0x54}}]}}]}}, 0x0) 22:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x50}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xbe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x38}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e", @ANYRES16=r1, @ANYBLOB="0100000000084ab08f9ef0000300", @ANYRES32=r3, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="40b6dc0085f95d8cd47d11d484a3dce3bdf7d7f5cddcfb38bdd4d85a6451c6d7e3f3a9411fb1e358b79270a61baf318863fb665d9698e2c9247fe4036b2775000400003decbd2794dcbe74011e9cda43b476f9946d48a253e1d490fbe5f366d279ad7d569a0d966b33bf000ade19cbc18972f042f39d1b6a62ef4f2e2e7ca9beaab9d4eca304c6e3ec64034bab12f8f072e67bb21ecefc1f02f49fa86010cab3432e42e0d10290649e8006b01791d71c8fcccba372a045eea634767a37da361ea1dca15a26d3b11a3e068a8aea17c1108bd7bd1be493dcdf5770718a9fe5af85d49460f0d118b430124b74346bbb151aaa40dc23d4556d1ebeca8976704928d7a067a77476e427e7f9673fa2d52d30abf8dac3c2", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000"/36], 0x40}}, 0x0) 22:02:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockname$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) 22:02:29 executing program 3: write$hidraw(0xffffffffffffffff, 0x0, 0x0) 22:02:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x72d003, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newnexthop={0x64, 0x68, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x3, 0x0, 0x1}]}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_ID={0x8}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xa, 0x2, 'wlan0\x00'}}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x10}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002ac0)={'ip6tnl0\x00', &(0x7f0000002a40)={'ip6tnl0\x00', 0x0, 0x29, 0x3e, 0x6, 0x80, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x1, 0x7, 0xfffffffa}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004040)={&(0x7f0000002b00)={0x14fc, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x2ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.)+,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "c3508b59c69a239cf400e4b316620abc96ebc60ac8d3beffe923b1e936a8c4bcc608705c3566438e2bbad8b84419dac21b4ff225ad2d27748d12b88fcfe8183d036972fc6673f1f90aefdb5adecdc135cbe6123289ca7c05d4bb62d6e37dbc83cc4d06e00f082bb939dfc10d19b81ca2eff2d6c8d1"}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "01af5a60fe1a859606baef3a921a9016a9025da386189818a39933efaf5f32c8cf83b8bafb2862bf6a097eebb61440daed225005715fd94d36fdb87d31c54342e7f4d0ca9aa6d7dad4d380949b8ab20d6f57512714cd736ff11b"}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "4cf62a2e6e7a5a9ee873b852110384d10e618c383f2292ef6217e2fee4535f371d68991b2cf0ea073bf3af224cf4b8e7e501505024b7cdac650a07180c4fec16570b5f4a65b29740a11d446dc87d1e9fc607ad552cd36e6b6f015048e41123b2cdfdf910785f149c3d31cb5eb859729d0ce140e685dcf82cc274f06f016bd78a8a46cc678cf9e2103d9078e9ec738eae29c99db36055a87dbc0c0d5cc901255836753b8e7deee02989b86ba2cc5b6430e8f419abb03210617f0c9c391ae39cb0c985a54b"}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "b957243da1b555b9eed0d7efbdf909044e845fbc0c3fe9c9e81c22f3f98cda44b8f30f429e1bfbe04b76d84b84aad1a727f74f84030972381aa71866c22c2d97f3be9e07176433274b22505022fd675376dc96027cfb6f68fed1e91e77737d22e20f25cdd60d748cfce2e0e9b242ea7c6bea404ef3d2db7951fd88e7d6957c3f"}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1010, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x3c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "a1b9419b103698f654719276ef87c1a5b7c1afe69698bb7690d0"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeaf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbefcc6e}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71a000}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '[\xa8\\ \xab(\\%\x9e:\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbc\xd6]\\@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x14fc}, 0x1, 0x0, 0x0, 0x28239973da529942}, 0x440d0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="220033008d72d7bcabd41a28008cff50405050505000000000000000090000"], 0x40}}, 0x0) 22:02:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@remote, @dev}, &(0x7f0000000040)=0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0xfb, 0xf5, 0x4, 0xe8, "c5d76511914aff9e96fd205097773691", "df445130acfe6d1bdff92dc5457ff960345c9a938591bac5476b2d35e05fec70a9c67f5498c9532f349076c23e696758e557765c16796627d081e1c22ccf22afcd725e8f6146077b1a160ac438e656751352e6c4d7db0e26941a9a533ea50a0b8a568b5540e7cd150cba75e9ec542846e41082ca97805398569fc2cfd5c1ab2c38f90fe0714154bd3ac58966f8ed5681bd7ceebb29f12aa5fa771248c8572036d036f168e556ef0254eb375800bb3a2092b9e735c9d38b22b51f543b71f385cc9ed4aec65d6597d1863c7ed5c650deeb4d00c489ad712d0c406cc16a018ed188"}, 0xf5, 0x2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB="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"], 0x20}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) fstatfs(r3, &(0x7f0000000280)=""/212) 22:02:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000340)={0x7f, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x3a, 0x7fff, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0xa7, 0x80000000, 0x9}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x80, 0x5, 0x18, @mcast1, @remote, 0x8000, 0x8000, 0x5, 0x3800}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4802000a}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x144, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x440000c0}, 0x800) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4440, 0xaeb1547de0c34fbf) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000800)) [ 421.268609][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd 22:02:30 executing program 3: syz_open_dev$hidraw(&(0x7f00000011c0), 0x8001, 0x0) 22:02:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101081, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xb0, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c208ee08a85ad8a0ecc676f899ca59b14138be71f9db404"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "722fd387258ee8444cac248974dfd352b419832f7f965b39"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r11}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) [ 421.519835][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 421.818872][ T25] usb 3-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 421.847748][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.896550][ T25] usb 3-1: Product: syz [ 421.901342][ T25] usb 3-1: Manufacturer: syz [ 421.905971][ T25] usb 3-1: SerialNumber: syz [ 421.955458][ T25] usb 3-1: config 0 descriptor?? [ 422.241883][ T5] usb 3-1: USB disconnect, device number 9 [ 423.018493][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 423.278380][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 423.558806][ T25] usb 3-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 423.567880][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.576128][ T25] usb 3-1: Product: syz [ 423.580457][ T25] usb 3-1: Manufacturer: syz [ 423.585143][ T25] usb 3-1: SerialNumber: syz [ 423.592613][ T25] usb 3-1: config 0 descriptor?? 22:02:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x0, 0xfffffebd, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b997807b9ed9a85b6a0fd95180f1d2951b0ef77637fb1652eae221d0dfbb740e15aed38a5a018ec0c8b15614a9f2b3fca32064b0c"}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/222) syz_usb_disconnect(r0) 22:02:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$incfs(r3, &(0x7f0000000840)='.pending_reads\x00', 0xa80, 0x100) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r1, 0x906, 0x70bd28, 0x8, {{}, {@void, @void, @val={0xc, 0x99, {0x800, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c98044fdd64705cb90b4dc0ed014f0e4622899b9e32aab48"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7e97aa231e9b57e866eb516712291d2eb298517ef6c00b7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x40911}, 0x4004080) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r7, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x4a, 0x5b, "efbecd8c182eee3d67d6ea828e61055f42787907de5298e2f4a339318c895c21bac206eccbb41c7376b830e4f891d5416dcdf88bcc29fc4e44efa8d657194e10456ac97bc895"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xbf, 0x5b, "7c48fd26157078077bd24be08635a3121248f9c45445b19986e027cbdf81f48f42720a77f70442902b9295709a5ea4028111fd51a83d4546f250616e67729eb2156621bac4a89578d19c5d2a1832a7790e1858bda15372c1f3b3b3260cea72dc745e242adec2cf9cdd0a712d6a916e4be33e52a39fd97e58b34e8c7a5db4a9c111dedb8f1d6b0c54a2194c1e3de97421173561404485cc11ea00949f28ebf19c389f70f953b9abb218f97ab0076fcee4335d5575344df5db28fc2b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x2}, 0x20048042) 22:02:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x1f, 0x7, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8, 0x0, 0x3}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x40890) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="22003300b01765f43b07110000000802114d7119a52505a707a3c5389300000050505058505016000000000000000000"], 0x40}}, 0x4010) 22:02:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000015c0)={0x18c, r7, 0x53991384815237af, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x164, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x32, 0x2, "c124de77bc6c5d87d81d47a6d489857f70a0f7206fae1070f83f5b17829661af6fb038c4ec18b1c40328919d99dd"}}, {0x88, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x82, 0x2, "4dc23c5a01820164ac94f494c5da0e0b55c492ca597df4f01ba91f7ed6ea00a4cacd17c71f3704e67a35b50140889b668e115c5963378e0b8a582e51af619a7038cc487601a0a47d643bbc0240a91517a22ae98bd41992071df02e5266ebbe667587d30e305339fb177e4d7676ac0832824210f330d06d4ab6628274572c"}}, {0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x99, 0x1, "936d3a69fd912d293004a7f50f12ee1b5cf81d979adebdb5bd9f5266091580b29cdb04182bc9910aa662e886a546fa8f90aa51e735e709a35494da002f925d9cf89772605eff3f8768a3cfe341312e5b125b61f8cd0576cb547dea6723ef9887547fa1c82fd3d7f075e46ebcfc203fb60089f3dce5f365c1b80bdfae064ee09e3af6d5cfedbdce40a91fc5fa8ea0ae4de0a373eb5d"}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040050}, 0x8000081) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x1158, r3, 0xb0b, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x1114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "c06c23437cf73d2eca58b1dddd5759a72d4abc8d0f964df51f0683ab5051"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "afd28de6efa75be3bad9546a8a6616ef35af7c7f28"}, @NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "0bf9bae32efcc3f7b8f7cf748a8905ff68752b509331ee23d158708dbf9cb5fc07ff4c79492c0488f4a2264baa6e87aad2aef5e014d3fc59e710b9762253d91eed2c67fef2c1eb1ba7391e5a9752d6dae46d46bb736ed8757c42780d99393a2093f5e221d804fe87dd70ead22525bd4f0a63dc0e244c78c9419d1beb3e8c2b127844e9f724123461f0f3d13e19f0b8c9e573fddd89b80e0e3dcf390aedb54866d6ebb9d88b316ad4c5f8013081e4c56be9cc6358e94f95e740d915"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@ssid={0x0, 0x12, @random="9fa898e1eb2aa8d60ba78fa0f0dc621c5aa0"}, @dsss={0x3, 0x1, 0xd9}]}]}, 0x1158}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001f80)={&(0x7f00000020c0)={0x12c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc5}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x700, 0x7808, 0xffffff86, 0x1, {{0x14, 0x4, 0x0, 0x32, 0x50, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @generic={0x86, 0x9, "331e8df3212299"}, @rr={0x7, 0x7, 0x9f, [@dev={0xac, 0x14, 0x14, 0x26}]}, @end, @lsrr={0x83, 0x13, 0x33, [@rand_addr=0x64010100, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x13}]}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x3, [{@remote, 0x11}, {@multicast1, 0x8001}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000004c40)=0x0, &(0x7f0000004c80)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000004dc0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000005100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004e00)={0x294, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x9, 0x20, 0x10000}, {0x1f25, 0xfd, 0xcc, 0x1}, {0x80, 0xb0, 0xbd, 0x401}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 22:02:32 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x9f3f, 0xc0043) 22:02:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0x13dc, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x494, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x39e, 0x0, 0x6, 0x200, 0xa201, 0x2d05, 0x7f, 0x1371]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x7, 0x80, 0x8001, 0x800, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x2, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x1}, {}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5}, {0x5, 0x7}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0xa}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0xa}, {0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x4, 0x0, 0x1, 0x3f, 0x7d0, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf17d, 0x400, 0x9, 0x6, 0x8001, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x38, 0x24, 0x9, 0x34, 0x48, 0x3, 0x1, 0x0, 0x18, 0x6c, 0x30, 0xb, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x3f, 0x1, 0x6, 0x5, 0x9, 0x401]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2ec, 0x3f, 0xff, 0x3, 0xfff, 0x1, 0x269c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x2, 0x7, 0x3f, 0xf797, 0x401, 0x3]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x1}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x7}, {0x4, 0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x2}, {0x7, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x4}, {0x2}, {0x4, 0xa}, {0x1}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x1}, {0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x2}, {0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x4, 0x5}, {0x1}, {0x2, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x3, 0x2}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x3, 0x2}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x30, 0x18, 0x4, 0xc, 0xd9d331f7bc2dfc32, 0x6, 0x5, 0x6, 0x2, 0x12, 0x3, 0x2, 0xc, 0x60, 0x60, 0x2, 0x48, 0x30, 0x3, 0x12, 0x10, 0x1b, 0x18, 0xb, 0x6, 0x1b, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {}, {0x3, 0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x3}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x5c, 0x3ff, 0x1, 0x1, 0x12c8, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x12, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x97, 0x9, 0x5, 0xff, 0xc67, 0x2, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x0, 0x12, 0x4, 0x36, 0x27, 0xc, 0x6, 0x4, 0x18, 0x24, 0x4, 0x2, 0x3, 0x6, 0x49, 0x2, 0x0, 0x48, 0x60, 0xb, 0x36, 0x48, 0x0, 0x3, 0x12, 0x24, 0x12, 0x18, 0x3, 0x1, 0x1b]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x7}, {0x7, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0xa}, {0x7, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x3, 0x9]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0xc, 0x2, 0xb, 0x2, 0x2, 0x1e, 0x6c, 0x6, 0x1b, 0x3, 0x2, 0x1b, 0x5, 0xb, 0x1, 0x60, 0x18, 0x9, 0xb, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x36, 0x6, 0x2, 0x24, 0x30, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x2}, {0x2, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x9, 0x16, 0xc, 0xb, 0x1b, 0x18]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x6}, {0x5}, {0x0, 0x9}, {0x3}, {0x4, 0x2}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x6}, {0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4, 0x24, 0x48, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0x8, 0x8, 0x3, 0x40, 0x21, 0x80, 0x8]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x24, 0x2]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0x7}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x6}, {0x2}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x8}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x7}, {0x0, 0x8}, {0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe4, 0x3ff, 0x5, 0x2, 0x0, 0x2, 0x9]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x7fff, 0x8, 0x9, 0x4, 0x1, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x4, 0xd5a9e209adf4a7fa, 0xb, 0x2, 0x1b, 0x30, 0x48, 0x48, 0x12, 0x1, 0x36, 0xd602fdf92187b37a, 0xc]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0x5}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x4}, {0x5, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x4}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4a4, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf55a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2bc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x18, 0x12, 0x31, 0x4, 0x52, 0x4]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x4, 0x1, 0x1f, 0x5, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x5fd0, 0x6360, 0xff81, 0x0, 0x6a, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x1}, {0x5}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x6, 0xb, 0x6, 0x30, 0x5, 0x4b, 0x6c, 0x36, 0x30, 0x18, 0x5, 0x5, 0x6, 0x60, 0x24, 0x6c, 0x6, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1f, 0x7, 0x200, 0x80, 0x7ff, 0xf001]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x12, 0x18, 0x5, 0x24, 0x16, 0x4, 0x1b, 0xcbbe910b42714564, 0xf, 0x6c, 0x23, 0x5, 0x24, 0x0, 0x4, 0x1, 0x2, 0x18, 0x48, 0x9, 0x24, 0xb, 0x12, 0xb, 0x6c, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x3, 0x24, 0x3, 0x7fff, 0x5, 0xfff7]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x30, 0x3, 0x2, 0x4, 0xb, 0x2, 0x1b, 0x18, 0x3, 0x48, 0x3, 0x18, 0x1, 0x65, 0x12, 0x36, 0x3, 0x48, 0x18, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b, 0x9, 0x0, 0x8f, 0x7, 0x8, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x60, 0x2, 0x60, 0x6c, 0x3, 0x6, 0x48, 0x16, 0x2, 0x16, 0x2, 0x36, 0x2, 0x30, 0x22]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x99, 0x8, 0x8, 0x7, 0x1818, 0x7, 0x7f, 0x7]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x9}, {}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x8, 0xfffa, 0x0, 0x1f, 0x3e6, 0x9]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0xf}, {0x5, 0x9}, {0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x4, 0x5}, {}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x1}, {0x0, 0x6}, {0x4, 0x2}, {}, {0x1, 0xa}, {0x2, 0x1}, {0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x6}, {}, {0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x9, 0x3, 0x6, 0x9c1c2d6094ccd1c0, 0x6, 0x48, 0x18, 0xb, 0x30]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x9}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x7}, {0x7, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x5}, {0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x1}, {0x6}, {0x4, 0x2}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {}, {0x4, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x4, 0x0, 0xfff, 0xfc00, 0xc2, 0x6]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x6}, {0x3}, {0x6, 0x8}, {0x6}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x4}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x4, 0x6}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x6}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x1}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x3, 0x2}, {0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x0, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x1f, 0x9, 0xfff7, 0x8, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0xa}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x2, 0x4}, {}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0xc, 0x1b, 0x6c, 0x5, 0x3, 0x1, 0x5, 0x2, 0x3, 0x5, 0x0, 0x12, 0x3a, 0x48, 0x30, 0x1, 0xc, 0xc, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff7, 0x8, 0x1, 0x3, 0x8, 0x4, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x600fcc29}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x6, 0x2, 0x5, 0x9, 0x60, 0x19, 0xc]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xeb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x66}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc4, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8fa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x37}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}]}]}, @NL80211_ATTR_TID_CONFIG={0x534, 0x11d, 0x0, 0x1, [{0x39c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x390, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x1}, {0x5, 0x7}, {0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x4, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {}, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x4}, {0x3}, {0x1, 0x4}, {0x1, 0xa}, {}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x9, 0x8, 0x200, 0x3, 0x2, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x24, 0x4, 0x30, 0xb, 0xb, 0x30, 0x3, 0xc, 0x6, 0xb, 0x9, 0x18, 0x36, 0x12, 0x12, 0xb, 0x30, 0x6c, 0x30, 0x30, 0x32, 0xef7db17f7547da7a, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x1, 0xd36, 0x40, 0x4, 0x0, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x24, 0x16, 0x9, 0xb64e10efa2a84469, 0x24, 0x6c, 0x18, 0x60, 0x4, 0x18, 0x16, 0x4, 0x12, 0x2, 0x5, 0x60, 0x16, 0x12, 0x6c, 0x9, 0x1, 0x1, 0x16, 0x4, 0x9, 0x24, 0xc, 0x6, 0x6c, 0x0, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x14, 0x0, 0x30, 0x48, 0x48, 0xb, 0x48, 0x18, 0x1b, 0x16, 0xc, 0x2, 0xb, 0x48, 0x4, 0x5, 0x1b, 0x27, 0x48, 0x6, 0x48, 0x36, 0x36, 0x4, 0x62, 0x1b, 0x36, 0x6, 0x9, 0x30, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x6, 0x5, 0x8, 0x3f, 0x8bf4, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0xc, 0x48, 0xb, 0x6, 0xc, 0x60, 0x6, 0x3, 0x9, 0x24, 0x3, 0x2, 0x36, 0xc, 0x16, 0x18]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8000, 0x80, 0x8, 0x8001, 0x6f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xf10, 0x9, 0x1c0, 0x7, 0x4, 0x7, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0xa}, {0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x11}, {0x3, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x2}, {0x4}, {0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x7}, {0x3, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {}, {0x6}, {0x7, 0x3}, {0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x1d}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0x3}, {0x5, 0x8}, {0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x81, 0x6dd1, 0xfffe, 0x1, 0x5, 0x1, 0xd11]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x3, 0x9, 0x401, 0x5, 0xfffe, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x12, 0x1b, 0x5, 0x30, 0x6c, 0xc, 0xc, 0x9, 0x1, 0x6, 0x9, 0x6c, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x2, 0x9}, {0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x4, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x118, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x873, 0x2, 0x3ff, 0x8860, 0x936, 0x88, 0x8, 0x200]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x7}, {0x3, 0x6}, {0x2, 0x1}, {}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x5}, {0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x5}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x6}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x1}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x2}, {0x6, 0x7}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x6, 0x9}, {0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x5}, {0x4, 0x5}, {0x2}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x1}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0xa}, {}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x1}, {0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x3, 0x1}, {0x4}, {0x3, 0x2}, {0x4, 0x3}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x7}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x16, 0x48, 0xc, 0x48, 0x36, 0x12, 0x2, 0x1, 0xc, 0x30, 0x9, 0x16, 0x4, 0x4, 0x18, 0x3, 0x6, 0x30, 0xb, 0x36]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x6]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x80, 0x8, 0x100, 0x200, 0xffff, 0xffc1, 0x41f]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0xc, 0x4, 0x48, 0x48, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x9, 0x2d, 0x9, 0x1, 0x48, 0x0, 0x60, 0x6c, 0x48, 0x18, 0x4]}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4a5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x4, 0x4b, 0x16, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x2}, {0x7}, {0x6, 0x2}, {0x6, 0x9}, {}, {0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x8}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x2, 0x9, 0x24, 0x6, 0x36]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xd5feb8be13304be8]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x2}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x4}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x6, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x3}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x2}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x48, 0x1, 0x2, 0x16, 0x6c, 0x30, 0xb, 0x4, 0x2, 0x3, 0x6c, 0x3, 0x0, 0x0, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x200, 0x0, 0x4, 0xde40, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0xffff, 0x8, 0x4, 0x1, 0x0, 0x3b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x80, 0x81f, 0x2, 0x8000, 0x8d, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfa, 0x7, 0x20, 0x3, 0xfff, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x464, 0x11d, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbff, 0x55d, 0x872, 0xfff8, 0xbf6, 0x2d5c, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x7, 0x9, 0x5, 0x8, 0x1000, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x5}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x36, 0x3, 0x6, 0x6c, 0x24, 0x3, 0xc, 0x60, 0x2, 0x6c, 0x94, 0x9, 0xb, 0x5, 0x5, 0x60, 0x48, 0x36, 0x1b, 0x12, 0x6c, 0xc, 0x3c, 0x48, 0xc, 0x6, 0x2, 0xb, 0x18]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x9}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x5}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x2}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3, 0x7f, 0x81, 0x6ece, 0x400, 0x5a]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x1}, {0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x1}, {0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x1}, {0x4}, {0x1}, {0x1, 0x7}, {}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x9}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x24, 0x800, 0x8001, 0x7, 0x8, 0x735d, 0x7ff]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x12, 0x2, 0x4, 0x4, 0x18, 0x18, 0x9, 0x16, 0x12, 0x6, 0x1, 0x3, 0x5, 0x4, 0x3b, 0x1d, 0x48, 0xc, 0x36, 0x48, 0x1, 0x36, 0x1b, 0x0, 0x5, 0x6, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x1, 0x6c, 0x60, 0x16, 0x12, 0x6, 0x24, 0x3, 0x16, 0x6, 0x3, 0x16, 0x36, 0x2, 0x1, 0xb, 0x24, 0x6c, 0xe]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x12, 0x60, 0x48, 0x6c, 0x5, 0x36, 0x3, 0x1b, 0x1b, 0x6, 0x16, 0x36, 0x4, 0x5, 0x30, 0x24, 0x24, 0x6, 0x24, 0x12, 0x18, 0x7c, 0x4, 0x5, 0x6, 0x1, 0x2, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xfffb, 0x3f, 0xb, 0x40, 0x7, 0x5]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x6, 0x60, 0x24, 0x9, 0x24, 0x16, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x22, 0x36, 0x6, 0x9, 0x18, 0x3, 0x12, 0x30, 0x36, 0xc, 0x6c, 0x30, 0x6, 0x1b, 0x5, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xf3d, 0x7, 0x101, 0x6de7, 0xadd, 0x243d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0x1000, 0xfffb, 0x1, 0x20, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x16, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x16, 0x12, 0x1, 0x30, 0x27, 0x5]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x7}, {0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x18, 0x36, 0x5, 0x1b, 0x6, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x4, 0x1}, {0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x2}, {0x5, 0x3}, {0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x3, 0x9}, {0x2, 0x3}, {0x0, 0x4}, {0x1}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x4}, {0x1, 0x8}, {}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {}, {0x6, 0x6}, {0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x7, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x2}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x60, 0x48, 0x2, 0x2, 0x5, 0x3, 0x12, 0x24, 0x2, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1f, 0x70e, 0x7, 0x6, 0x7fff, 0x101, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x9, 0xb, 0x2b, 0x36, 0x2f, 0xb, 0xc, 0x6, 0x16, 0x3, 0x44, 0x48, 0x3, 0xb, 0x3, 0x48, 0x1, 0x6c, 0x48, 0xe23fae7ab7b78958, 0x31, 0x60, 0x36, 0x5, 0xc, 0x7e, 0x60]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x4}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x7}, {}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x8}]}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe208}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x100, 0x9, 0x20, 0x4, 0x7, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0x6}, {0x6, 0x1}, {0x4, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0x4}, {0x6, 0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1f, 0x544d, 0x0, 0x2, 0x8000, 0x4, 0x4]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x601023ad2ef58a5c}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x6}, {0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x12, 0x36, 0x18, 0x48, 0x3, 0x3, 0x6, 0xb, 0x3, 0x6, 0x1b, 0x16, 0x48, 0x1, 0x5, 0x13, 0x0, 0x1b, 0x6c, 0x48, 0x3, 0x18, 0x18, 0x6, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x13dc}, 0x1, 0x0, 0x0, 0x8000}, 0x851) r2 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x9, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0xc}}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf73}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3d7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4041}, 0x4000091) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x48, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9ee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$RTC_PLL_SET(r9, 0x40207012, &(0x7f0000000140)={0x0, 0x4, 0x8, 0x2e9687f0, 0x7ff, 0x5838, 0x8001}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000000000000000266148e82d0b5a257be227df37ae73d1b05b08482152c522bc8e3357ccb3ba9f6cc6d2eb4f1596d38349"], 0x40}}, 0x0) [ 423.836506][ T25] usb 3-1: USB disconnect, device number 10 22:02:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x80, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xc6cb}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x67ec}, {0x8, 0x0, 0xe7a}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x6c27}, {0x8}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x9}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x40eb}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, 0x80}}, 0x44101) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/129) 22:02:33 executing program 5: syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000075f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x759}], 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:33 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x34, 0x29, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xe, 0x5}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x81}}, @TCA_RATE={0x6, 0x5, {0x87, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24010000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x38, r1, 0x200, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @val={0x10, 0x0, 0x42}}}]}, 0xfffffffffffffdd8}}, 0x4000011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x92f8e960d1ed498c, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x8}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x100) 22:02:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) [ 424.341184][T16543] loop5: detected capacity change from 0 to 264192 22:02:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:34 executing program 2: syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x8040) 22:02:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x75]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xac01, 0xff, 0x9, 0x0, 0x0, 0x800, 0x2, 0x0, 0x8a]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) 22:02:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5b}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x200448d1}, 0x20004000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 22:02:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x414200, 0x0) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x1b4, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf22d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a5126482dff0b0b50c55530ee34086e75c92b7d97eea19c1831f1d20bc29379f757f1f"}}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040048) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe84}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffff}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x16, 0x1}, {0x1, 0x1}, {0x4}, {0x9}, {0x30, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x4000) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 22:02:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x686}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4c1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040090}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000f1e28459c7000300", @ANYRES16, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:34 executing program 3: syz_open_dev$hiddev(&(0x7f00000014c0), 0x0, 0x4343) 22:02:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x80000001, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 22:02:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x74, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x21, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x9000, 0x4, 0x9, 0x686, 0x2, 0x3ff, 0xfff7, 0xfff8]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x74}}, 0x0) 22:02:34 executing program 2: syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x80301) 22:02:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x11c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9be77f4b1a05c8912d7303ee31db24d9259580c62c34237b"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2346b648e4b38854d9380b75a4bba9714a54345430ad610"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a72822b9f680131b71604089363033e97848ca453291c1aa"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c2abdf0385fb666c79f32ce4feb19ecd5ac3358e1ef6d892"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0xf52b8b0426c4bd62) 22:02:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000001bde84e13b1c0f9bdd811e1ced9865e040fa8b32cc7ac858ebd000000000000001205a1d2d0702891352e9aa51db33d1c4abd3df9af34d2d33e473fa6121fcbf431d14bc7513fb409f3ec2f1ba8eca7b9ee900e5b440d6588eaf103a592c20ff871afda62f1936203febf467512afa5cc780b20d9c45b5fd811e102e2f3049bf320115d399b3463844b3766ad8d518f24", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000400000000000000"], 0x40}}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x148, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4f66b109}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5f2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7cab99c6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1409}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) 22:02:34 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x70, 0x20, 0x3340, 0x71c, 0xbf15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0xf9, 0x86, 0x54, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x20}}]}}]}}]}}, 0x0) 22:02:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r4, 0x389, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x8, 0x62, @rand_addr=' \x01\x00', @private0, 0x10, 0x1, 0x7, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="3c008100004000"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000c0000000000"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="00032abd7000fbdbdf250300000005000300080000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="05000500ff0000006400018008000100", @ANYRES32=r5, @ANYBLOB="000003000300001608006d16", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000001400020073797a5f74756e000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002c40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x13c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x13c}}, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:34 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x7f, 0x0) 22:02:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00'}) r4 = accept4$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x800) dup(r4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="000000000097e1b1f65414a4309a9b5dc46d492f28485905e7a3817cf8aad75f74437414709d334cd19872ca94750b2ae02786d3950b6605"], 0x24}}, 0x48850) 22:02:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4030}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x20400) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:34 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) 22:02:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4180, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf2503000000050012009400000006000e00ff7f000006001d000900000005000d00010000000500120001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008815) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000ff0ff7ffff0200", @ANYRES32=r4, @ANYBLOB="2200da6c91580465cf9835409a3300c77a0000ffffffffffff08021100000050505050505000000000010000000000f788cb0843b1cf963f150ca43f833d3e0641611bac74b3d5f915d7a43d71c3e6fee310f2cc5e2a86dcd54567822319a5bd269bf21b3f49f60ab17b843d89bc852160fb9683587a43004414a8361e7ee07b53eec7054443fb3289402cba29fbdc76655fee97f45405b1444abfbb6bedb6863be70fee0ea9e8fe00713d46e2573082a64c1de193ff0dfa92f087"], 0x40}}, 0x0) [ 426.008005][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 22:02:35 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000500)={{0x3, 0x2}, 0x0, 0xffffffff, 0x3, {0x2}, 0xfc, 0x40}) read(r1, &(0x7f0000000080)=""/255, 0xff) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x389, @time}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000003c0)={0x0, 0x0, 'client0\x00', 0x0, "877d4b2c39048f7f", "fd2b5107007da4f838a04bed802b059e98ed2283b93cc5cfd870b348fe43ef5b"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000340)) tkill(r0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x2f, 0x1, 0x7, 0x40, 0x0, 0x7, 0x80008, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x80, 0x7}, 0x108, 0x8, 0x1000, 0x5, 0x400, 0x1, 0x5, 0x0, 0x1f}, r0, 0x4, r5, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f80881d8", @ANYRESDEC=r0, @ANYBLOB="00022cbd7000ffdbdf25120000000800080007000000200001800800030000000000140002007663616e3000000000000000000000000800060080000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300171e26c356e0aa6a5ef02dacd52ffde6740b479e5a7386cc38e9d799409b1f248b7505163918416985aa34f24b340a1967623aba25d868bbb498145252d52ad3eb5188f228f69c39ff148da6a74c7d56817cbcc4cdb5e7214048e8aa0cbe78573e4c48d6071aa8820835d33056a1c6e504f5b3036abec79c48c089d417f3ea7480f8845ad8ce09dc804bac594d0ddf4b55fd7d3ed7d0e1e9fd9a782b5ff077bc29af22a55602185b07059e0f4f09be73", @ANYRES32=r7, @ANYBLOB="220033000200000094d99bf4d7d45077ed3d9affff6f55d17f67474ce02a9759ffffffff08021100000050505050501fefa3c957acd0efa1326d068ccc4608f8d61462d903fccea1a8fcf377b54ea14646db0223906322d19812b37c2a3d21a617b148a48e928b001e18333f6ba63c486df182044202a3c902ab4154bd11c3fdf4321cde94bdbb9c3f8bb177512cb02bc82914d4c952492f20352d11eafde8de1ce34af6e553b217fd7f102f"], 0x40}}, 0x0) [ 426.128467][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 426.140215][T16621] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 22:02:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b11f5a1b43"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xfe}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9c35e8d53d"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0)) 22:02:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000004339003b00000008003dc8099fc9387f008ea4c7a255f2b6a8d516258eeda710e4ab5e8d7a63558587ed9aafe6d783b38ce5b7dd41d9ff7515e8d0db8163195169d4200d4588f492328b34530871c7beae18836cc457320ce7d871cb1dfac75cce8907f53986c6fa8cfbb13e5f07f8431a5a5229bd77d5af3e1f71d715e5b07d7b2bb7cfe698d450d5e41cd05f7b19d15d30101343a693b40e8130bfa0b2a192143753484f7cabf6153b26c84bc604bcd2d5a48eb74ee0e897ae600086ef0dbb5d2b580f6ce327b0ad0b2c2cf6b4f14d6696850823aadb4badf1c21c9deaf7338b5fa0bc50c61fbfe1cbdf4acc260b36f9bd1ba6b90953eb09f075a72433112cb22a069ac3a0a3a4165c341407ee", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000420000fb0400000008000300", @ANYRES32=r5, @ANYBLOB="0c009900030000007200000022003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000020000000003b00000008000300c1ee8eca77d7cb96659b5d62ff00638af0b002ec7ffb515826fe190b97e7cf1bea8fa098210b3892", @ANYRES32=r8, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r10, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000089f4faafc215bdf34a515d3fa9f4c673e33aaf9b48f7519f2fbdce91e696450c3e8a5bdd7ee069a4f4f842a8000d4a834df63ddb1582a6ef41464f83b35bfd2e", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) [ 426.318305][T12369] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 426.398360][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 426.405591][T16630] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.481054][T16632] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 426.530332][ T7] usb 4-1: config 0 interface 0 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 426.560895][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 426.568559][T12369] usb 3-1: Using ep0 maxpacket: 32 [ 426.576483][T16632] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 426.617752][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.688709][T12369] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 426.789378][ T7] usb 4-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 426.798717][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.806817][ T7] usb 4-1: Product: syz [ 426.813044][ T7] usb 4-1: Manufacturer: syz [ 426.817760][ T7] usb 4-1: SerialNumber: syz [ 426.826565][ T7] usb 4-1: config 0 descriptor?? [ 426.878701][T12369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.898262][T12369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.906401][T12369] usb 3-1: Product: syz [ 426.924418][T12369] usb 3-1: Manufacturer: syz [ 426.931162][T12369] usb 3-1: SerialNumber: syz [ 426.979741][T12369] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 427.079971][ T7] usb 4-1: USB disconnect, device number 12 [ 427.189533][T12369] usb 3-1: USB disconnect, device number 11 [ 427.878349][ T5] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 428.158282][T12369] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 428.158301][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 428.308456][ T5] usb 4-1: config 0 interface 0 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 428.319798][ T5] usb 4-1: config 0 interface 0 has no altsetting 0 [ 428.408278][T12369] usb 3-1: Using ep0 maxpacket: 32 [ 428.493435][ T5] usb 4-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 428.503363][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.513159][ T5] usb 4-1: Product: syz [ 428.517352][ T5] usb 4-1: Manufacturer: syz [ 428.523087][ T5] usb 4-1: SerialNumber: syz [ 428.528826][T12369] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 428.530794][ T5] usb 4-1: config 0 descriptor?? [ 428.708683][T12369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.718311][T12369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.726482][T12369] usb 3-1: Product: syz [ 428.731004][T12369] usb 3-1: Manufacturer: syz [ 428.735832][T12369] usb 3-1: SerialNumber: syz 22:02:37 executing program 3: syz_open_dev$hidraw(&(0x7f00000022c0), 0x0, 0x101000) 22:02:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast, @device_b}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) 22:02:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000171", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6100330050804e00080211000000ffffffffffff080211000000750012008880000000000100000000000882040604208b0cddd52d1a000000ff000400140000000100010000000d7206030303030303710700ff0000ff764000"/100], 0x80}}, 0x20000010) 22:02:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 22:02:37 executing program 1: r0 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x75}) syz_open_dev$hiddev(0x0, 0x7, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000100)={0x2}) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000140)={0x0, 0xffffffff, 0x1f, 0xf5, 0x0, 0x1}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x9, 0x2}) syz_open_dev$evdev(0x0, 0x0, 0x101002) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000240)={0x0, 0x2}) r1 = syz_open_dev$hiddev(&(0x7f0000000280), 0x61, 0x200080) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000001300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x2a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8}, [@ncm={0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x7f}, @acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x0, 0x8, 0xff, 0x0, 0x40}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000001500)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x83e}}]}) ioctl$HIDIOCGPHYS(r0, 0x80404812, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000001700)=""/4096) [ 428.780957][ T7] usb 4-1: USB disconnect, device number 13 [ 428.827876][T12369] cdc_ether: probe of 3-1:1.0 failed with error -22 22:02:38 executing program 3: syz_open_dev$evdev(&(0x7f0000000580), 0x7, 0x688601) 22:02:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b1b000008000300", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008814}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff0000340a6983", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000022003300b0000000ffffffffffff08021100000050505050505000"/50], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r6, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8005) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}}, 0x4000) 22:02:38 executing program 2: syz_open_dev$evdev(&(0x7f0000000140), 0x1000000000000000, 0x0) [ 429.079169][ T7] usb 3-1: USB disconnect, device number 12 22:02:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c1aa89fa5b07fb472f7b3407ac"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x841000c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x17c, r1, 0x400, 0x70bd29, 0x3f, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7e0b3b1c460e6028b68907de81064fcbef7f21732d4e8d91"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c2341faefb9d9e94ce889b8b2cc1cbd0cb6c7b33bf1df20d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b30ecf19d706da31df3fc71badd9ed7140b425d3ca82ca9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b19717e5e893694b63beb03a100c4429af9fa7924ea47207"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61f948ba129bd1b84e40baf72930702734b1145b7ad6156f"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvtap0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_0\x00'}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) [ 429.198392][ T1265] usb 2-1: new high-speed USB device number 10 using dummy_hcd 22:02:38 executing program 3: syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0xa0000) 22:02:38 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x70, 0x20, 0x3340, 0x71c, 0xbf15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7f, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x2c, 0x3, 0x1, 0xf9, 0x86, 0x54, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x20}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) 22:02:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x42000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004044}, 0x84) 22:02:38 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x103201) 22:02:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 429.478367][ T1265] usb 2-1: Using ep0 maxpacket: 8 22:02:38 executing program 3: syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x282000) [ 429.665833][ T1265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.748277][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 429.784467][ T1265] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.811603][ T1265] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 429.837155][ T1265] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 429.855694][ T1265] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.877615][ T1265] usb 2-1: config 1 interface 0 has no altsetting 0 [ 429.998343][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 430.118582][ T25] usb 3-1: config 127 has an invalid interface number: 44 but max is 0 [ 430.127264][ T25] usb 3-1: config 127 has no interface number 0 [ 430.147326][ T25] usb 3-1: config 127 interface 44 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 430.169213][ T1265] usb 2-1: string descriptor 0 read error: -22 [ 430.175575][ T1265] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.178395][ T25] usb 3-1: config 127 interface 44 has no altsetting 0 [ 430.218445][ T1265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.250772][T16687] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 430.269546][ T1265] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 430.358408][ T25] usb 3-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 430.368431][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.376650][ T25] usb 3-1: Product: syz [ 430.381544][ T25] usb 3-1: Manufacturer: syz [ 430.392172][ T25] usb 3-1: SerialNumber: syz [ 430.496748][ T1265] usb 2-1: USB disconnect, device number 10 [ 430.646124][T12369] usb 3-1: USB disconnect, device number 13 [ 431.278175][T12369] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 431.458281][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 431.528145][T12369] usb 2-1: Using ep0 maxpacket: 8 [ 431.718285][T12369] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.726227][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 431.818742][T12369] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.828733][T12369] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.840437][T12369] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024 [ 431.851307][T12369] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 22:02:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 22:02:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000008000000000800030045cbd1b7cf4e95d49a8c004ccc673e2511a1b1805817e899588f0612004b9799e705badaa20cc98f25325d", @ANYRES32=r2, @ANYBLOB="22003300b0000000ffffffffffff08021100000050505050505000000000010000000000"], 0x40}}, 0x0) 22:02:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80084504, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)="b7"}) 22:02:40 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x70, 0x20, 0x3340, 0x71c, 0xbf15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x0, 0xf9, 0x86, 0x54}}]}}]}}, 0x0) [ 431.865552][ T25] usb 3-1: config 127 has an invalid interface number: 44 but max is 0 [ 431.899671][ T25] usb 3-1: config 127 has no interface number 0 [ 431.916766][T12369] usb 2-1: config 1 interface 0 has no altsetting 0 [ 431.929757][ T25] usb 3-1: config 127 interface 44 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 431.978455][ T25] usb 3-1: config 127 interface 44 has no altsetting 0 [ 431.998387][T12369] usb 2-1: string descriptor 0 read error: -71 [ 432.005016][T12369] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 22:02:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2000000000092, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5460, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0xc}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) [ 432.040833][T12369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.099022][T12369] usb 2-1: can't set config #1, error -71 [ 432.138251][T12369] usb 2-1: USB disconnect, device number 11 [ 432.228286][ T8112] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 432.228285][ T25] usb 3-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 432.228322][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.297653][ T25] usb 3-1: Product: syz [ 432.313002][ T25] usb 3-1: Manufacturer: syz [ 432.317645][ T25] usb 3-1: SerialNumber: syz 22:02:41 executing program 2: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0xd0080) 22:02:41 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x21, 0x70, 0x20, 0x3340, 0x71c, 0xbf15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf9, 0x86, 0x54, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x7f}}]}}]}}]}}, 0x0) 22:02:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000340)={0x0, 0xfe, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffe, 0x12b002) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 432.422156][ T1265] usb 3-1: USB disconnect, device number 14 [ 432.478215][ T8112] usb 4-1: Using ep0 maxpacket: 32 22:02:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000580)=""/184) 22:02:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40086602, &(0x7f0000000340)={0x7f, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x4020940d, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, "9bc257b7dc14045f8f898cf8d5e0740e2247b892328ef8b7e4be998e078b09a1"}) 22:02:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {0x2}, @device_b}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) [ 432.599385][ T8112] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.758255][ T8112] usb 4-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 432.767342][ T8112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.778119][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 432.828147][ T8112] usb 4-1: Product: syz [ 432.843645][ T8112] usb 4-1: Manufacturer: syz [ 432.869340][ T8112] usb 4-1: SerialNumber: syz [ 432.894819][ T8112] usb 4-1: config 0 descriptor?? [ 433.019717][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 433.139062][ T7] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 433.182440][ T8112] usb 4-1: USB disconnect, device number 14 [ 433.318256][ T7] usb 6-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 433.332114][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.347079][ T7] usb 6-1: Product: syz [ 433.355357][ T7] usb 6-1: Manufacturer: syz [ 433.373905][ T7] usb 6-1: SerialNumber: syz [ 433.385403][ T7] usb 6-1: config 0 descriptor?? [ 433.692424][ T7] usb 6-1: USB disconnect, device number 4 [ 433.968191][T12369] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 434.240573][T12369] usb 4-1: Using ep0 maxpacket: 32 [ 434.378295][T12369] usb 4-1: config 0 interface 0 has no altsetting 0 [ 434.448046][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 434.568156][T12369] usb 4-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 434.577344][T12369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.591225][T12369] usb 4-1: Product: syz [ 434.595393][T12369] usb 4-1: Manufacturer: syz [ 434.601983][T12369] usb 4-1: SerialNumber: syz [ 434.625971][T12369] usb 4-1: config 0 descriptor?? [ 434.688050][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 434.818112][ T5] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 22:02:43 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup2(r0, r1) 22:02:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f00000011c0)={0x0}}, 0x0) 22:02:43 executing program 4: add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 22:02:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffcc4, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) [ 434.897630][ T8112] usb 4-1: USB disconnect, device number 15 [ 434.989019][ T5] usb 6-1: New USB device found, idVendor=3340, idProduct=071c, bcdDevice=bf.15 [ 435.013023][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.063715][ T5] usb 6-1: Product: syz [ 435.089362][ T5] usb 6-1: Manufacturer: syz [ 435.100060][ T5] usb 6-1: SerialNumber: syz [ 435.109483][ T5] usb 6-1: config 0 descriptor?? 22:02:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{}, {}]}) 22:02:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={@wo_ht={{}, {}, @broadcast}, 0x0, 0x1, 0x0, @void}}]}, 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 22:02:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:44 executing program 4: prctl$PR_SET_PDEATHSIG(0x2a, 0x970000) 22:02:44 executing program 1: prctl$PR_SET_PDEATHSIG(0x4, 0x0) 22:02:44 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x10, r0, 0x0, 0xfffffffffffffffe, 0x0) [ 435.453206][ T5] usb 6-1: USB disconnect, device number 5 22:02:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691", 0xc2}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:44 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x88013, r0, 0x10000000) [ 435.566344][T16904] ptrace attach of "/root/syz-executor.2"[16903] was attempted by "/root/syz-executor.2"[16904] 22:02:44 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 22:02:44 executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 22:02:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 22:02:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8e, 0xf0, 0x9, 0x6, 0x0, 0x101, 0xa0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3c, 0x4, @perf_config_ext={0x7c, 0x1}, 0x50002, 0x7f, 0x4c8, 0x0, 0x4, 0x9, 0x584, 0x0, 0x2ec0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x4, 0x80, 0x3, 0x5, 0x80, 0xfa, 0x0, 0x2, 0x20010, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x81, 0x20, 0xeb, 0xa8}, {0x16e1, 0x85, 0x6e}, {0x4, 0x2, 0x3, 0x6}, {0x1, 0x6, 0xe0, 0x2}, {0x633f, 0x6, 0x40, 0x800}, {0x3fe0, 0x8, 0xc0, 0x55}, {0x3f, 0x8, 0x40, 0x401}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000280)={0x6, 0x5, {0x4, @usage=0x3b, 0x0, 0x2, 0xdb2b, 0x5, 0x517, 0x200, 0x424, @usage=0x1f, 0x5, 0x0, [0x3f, 0xfffffffffffffffb, 0x2, 0xc83, 0xe4e, 0x7]}, {0x2, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x400, @struct={0x2, 0x1}, 0x0, 0x7, 0xfffffffffffffff7, 0x7, 0x1, 0xed2b, 0x61, @struct={0x6, 0x2}, 0x1000, 0x0, [0x6, 0x3, 0x4, 0x0, 0x2, 0x6d]}, {0xae62, 0x5, 0x80}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, 0x0, 0x10, @inherit={0x80, &(0x7f0000000200)={0x1, 0x7, 0x7ff, 0x200, {0x11, 0xffffffffffffffff, 0x2, 0x2, 0x40}, [0xffff, 0x7, 0x86, 0x5, 0x1, 0x9, 0x5]}}, @devid=r3}) 22:02:44 executing program 1: clone3(&(0x7f0000000340)={0x400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 435.819550][T16918] ptrace attach of "/root/syz-executor.0"[16915] was attempted by "/root/syz-executor.0"[16918] 22:02:44 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) fork() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 22:02:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d6", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:44 executing program 2: keyctl$KEYCTL_MOVE(0x1b, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:44 executing program 4: clone3(&(0x7f00000002c0)={0x60000600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 22:02:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0xfffffffffffffffe, 0x0) [ 436.056775][T16933] ptrace attach of "/root/syz-executor.0"[16931] was attempted by "/root/syz-executor.0"[16933] 22:02:45 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/232, 0xe8) 22:02:45 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0xfffffffffffffc7e, 0xffffffffffffffff) 22:02:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35}]}) 22:02:45 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) read$eventfd(r0, 0x0, 0x0) 22:02:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x2d}]}) 22:02:45 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000200)=""/129) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 22:02:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x3, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) 22:02:45 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0xf, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) 22:02:45 executing program 3: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x58) [ 436.572820][T16994] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:02:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x15}]}) [ 436.622399][T17001] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:02:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x3, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) 22:02:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:47 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0a00, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/144, 0x90) 22:02:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x28}]}) 22:02:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0x6, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffd) [ 438.648074][T17037] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 438.658047][T17040] ptrace attach of "/root/syz-executor.3"[17036] was attempted by "/root/syz-executor.3"[17040] 22:02:47 executing program 3: keyctl$KEYCTL_MOVE(0x15, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x1d}]}) 22:02:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x3, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) 22:02:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x5, r0, 0x0, 0xfffffffffffffffe, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) 22:02:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4ed", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:47 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) 22:02:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 438.953832][T17054] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:02:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d}, {}]}) 22:02:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x0) 22:02:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x3, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) [ 439.014800][T17059] ptrace attach of "/root/syz-executor.1"[17057] was attempted by "/root/syz-executor.1"[17059] 22:02:48 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffd) 22:02:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0xa000}, 0x0) 22:02:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d}]}) 22:02:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0x2, r0, 0x0, 0x0, 0xfffffffffffffffd) [ 439.306007][T17073] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 22:02:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) 22:02:48 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x85}, 0x20) 22:02:48 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x74, 0x78}, 0x20) 22:02:48 executing program 5: perf_event_open$cgroup(&(0x7f0000002900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:02:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80) 22:02:48 executing program 1: prctl$PR_SET_PDEATHSIG(0x1d, 0x970000) [ 439.668727][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.675208][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 22:02:48 executing program 2: syz_io_uring_setup(0x377d, &(0x7f0000000680), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001a80), &(0x7f0000000740)) 22:02:48 executing program 1: prctl$PR_SET_PDEATHSIG(0x19, 0x0) 22:02:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x300}, 0x0) 22:02:48 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:02:48 executing program 5: prctl$PR_SET_PDEATHSIG(0x34, 0x0) 22:02:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 22:02:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) [ 440.031069][T17107] ptrace attach of "/root/syz-executor.3"[17106] was attempted by "/root/syz-executor.3"[17107] 22:02:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x8, r0, r1, 0xfffffffffffffffe, 0x0) 22:02:49 executing program 0: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) 22:02:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245d", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:49 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x9ae56e937af77247}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 22:02:49 executing program 2: shmctl$IPC_INFO(0x0, 0x3, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 22:02:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c902) fallocate(r0, 0x1, 0x0, 0x100007e00) 22:02:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x30}]}) [ 440.446583][T17126] ptrace attach of "/root/syz-executor.5"[17125] was attempted by "/root/syz-executor.5"[17126] 22:02:49 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='e8dab99234bb312e') 22:02:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:49 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x9, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:02:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x64, &(0x7f0000000000)=[{}, {0x3}]}) 22:02:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x4, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa7", 0xf}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) 22:02:49 executing program 1: prctl$PR_SET_PDEATHSIG(0x2, 0xc04a01) 22:02:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x15, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x60}]}) 22:02:49 executing program 0: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/160) 22:02:49 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$incfs(r0, &(0x7f0000001680)='.pending_reads\x00', 0x200400, 0x0) [ 440.916785][T17152] ptrace attach of "/root/syz-executor.2"[17150] was attempted by "/root/syz-executor.2"[17152] 22:02:49 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 22:02:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:50 executing program 5: syz_io_uring_setup(0x40007547, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 22:02:50 executing program 0: prctl$PR_SET_PDEATHSIG(0x34, 0x970000) 22:02:50 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) 22:02:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:50 executing program 2: add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) 22:02:50 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x1}, 0x0) 22:02:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x94}]}) [ 441.440677][T17175] ptrace attach of "/root/syz-executor.1"[17172] was attempted by "/root/syz-executor.1"[17175] 22:02:50 executing program 3: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/238, 0xee, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 22:02:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x8c982) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000000)) r2 = pidfd_getfd(r1, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) fallocate(r0, 0x3, 0x0, 0x100007e00) 22:02:50 executing program 2: io_setup(0xaa73, &(0x7f0000000000)) io_setup(0x7fff, &(0x7f0000000040)) 22:02:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 22:02:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0xe0000300}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}, 0x0) 22:02:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:50 executing program 0: prctl$PR_SET_PDEATHSIG(0x23, 0x0) [ 442.055781][T17199] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:02:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xe, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @loopback, 0x1}, 0x10) 22:02:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:51 executing program 3: keyctl$KEYCTL_MOVE(0xf, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x5, r0, 0x0, 0xfffffffffffffffe, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) [ 442.550332][T17222] ptrace attach of "/root/syz-executor.2"[17220] was attempted by "/root/syz-executor.2"[17222] 22:02:51 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) 22:02:51 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:51 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x2}]}) 22:02:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:51 executing program 0: r0 = fork() clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0], 0x1}, 0x58) 22:02:51 executing program 2: keyctl$KEYCTL_MOVE(0xb, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:51 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x20aa, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 22:02:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:52 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x3, r2, 0x0, 0xfffffffffffffffe, 0x0) 22:02:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d}]}) 22:02:52 executing program 3: prctl$PR_SET_PDEATHSIG(0x35, 0x0) 22:02:52 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0xfffffffffffffffe, 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), 0x0, 0x0, 0x0, r0) 22:02:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:52 executing program 0: syz_io_uring_setup(0x1000377e, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) 22:02:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f49", 0xbb}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:52 executing program 2: mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x1000, 0x1) 22:02:52 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x4589, &(0x7f0000000880)={0x0, 0xba35, 0x20}) 22:02:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 443.850468][T17278] ptrace attach of "/root/syz-executor.3"[17275] was attempted by "/root/syz-executor.3"[17278] 22:02:52 executing program 0: shmget$private(0x0, 0x2000, 0x54000ed2, &(0x7f0000ffd000/0x2000)=nil) 22:02:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:53 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) 22:02:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:53 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000000440)={0x30001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:02:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, r0) 22:02:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:53 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.', 0x1, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/73, 0x49) 22:02:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60}]}) 22:02:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:53 executing program 0: clone3(&(0x7f00000002c0)={0xc0001000, 0x0, 0x0, 0x0, {0x36}, &(0x7f00000000c0)=""/190, 0xbe, &(0x7f0000000180)=""/233, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) syz_genetlink_get_family_id$fou(&(0x7f0000001880), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) 22:02:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:53 executing program 2: clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) 22:02:53 executing program 3: keyctl$KEYCTL_MOVE(0x11, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:02:53 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:54 executing program 3: syz_io_uring_setup(0xee0, &(0x7f00000003c0), &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000d30000/0x1000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x377d, &(0x7f0000000680), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 22:02:54 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0x0, 0x0) 22:02:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setreuid(0xee01, 0xee00) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) 22:02:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 22:02:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:54 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:02:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 22:02:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:55 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) 22:02:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c902) fallocate(r0, 0x11, 0x400, 0x100007e00) 22:02:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:55 executing program 0: prctl$PR_SET_PDEATHSIG(0x2, 0x970000) 22:02:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f2", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:55 executing program 2: keyctl$negate(0xd, 0x0, 0x200, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x64, 0x37, 0x66, 0x64, 0x35, 0x64, 0x39, 0x62, 0x31, 0x65, 0x36, 0x38, 0x35, 0x30, 0x31, 0x33]}, &(0x7f0000000300)={0x0, "628f0ea1d7286767ca3112314030bb9f0238869dea01f38b8aca7ff0a850f5392630c9dce8e37153e095544741cc5d87b8bdfc3a127b61a7973635ba171ee0b8", 0x14}, 0x48, r0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) wait4(0x0, &(0x7f0000000280), 0x4, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r1) 22:02:55 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x1, 0x0, 0xa0000}, 0x20) 22:02:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 446.744903][T17419] ptrace attach of "/root/syz-executor.3"[17416] was attempted by "/root/syz-executor.3"[17419] 22:02:55 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x3312, 0x0) 22:02:55 executing program 0: syz_io_uring_setup(0x6b2f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x4485, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 22:02:55 executing program 2: renameat(0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001300)='./file0\x00') 22:02:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1d, r0, r1, 0xfffffffffffffffe, 0x0) 22:02:56 executing program 2: syz_io_uring_setup(0x4355, &(0x7f0000000640)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 22:02:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x400000000, 0x8c902) fallocate(r0, 0x1, 0x0, 0x100007e00) 22:02:56 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:56 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x8a00, 0x0, 0x0) 22:02:56 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) 22:02:56 executing program 2: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001300)='./file0\x00') 22:02:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:56 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "df4962afcd260b3b414d946cafcc71870f12c2174c3aa09b48e49c5ebe4ccb3d45d9b96b9545f1afd200522062511293d37ff45378a963bb55b6cb79d85d437f"}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0) 22:02:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d6", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:56 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x16}]}) 22:02:57 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r0) keyctl$clear(0x7, r0) 22:02:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) [ 448.366430][ T26] audit: type=1326 audit(1630533777.288:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17474 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 22:02:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:57 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x5, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:02:57 executing program 4: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:57 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x246000, 0x0) syz_io_uring_setup(0x60ce, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) 22:02:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, r0) 22:02:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) 22:02:57 executing program 4: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:57 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e80)={0x1, &(0x7f0000000e40)=[{0x5}]}) 22:02:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {}]}) 22:02:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34}]}) 22:02:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:58 executing program 4: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x61}]}) 22:02:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f5", 0x8c}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:02:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e80)={0x2, &(0x7f0000000e40)=[{}, {0x5}]}) 22:02:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296d588ee", 0xc7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 449.560641][T17529] ptrace attach of "/root/syz-executor.0"[17528] was attempted by "/root/syz-executor.0"[17529] 22:02:58 executing program 3: prctl$PR_SET_PDEATHSIG(0x27, 0x0) 22:02:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 449.876739][T17541] ptrace attach of "/root/syz-executor.0"[17540] was attempted by "/root/syz-executor.0"[17541] 22:02:58 executing program 0: socket$inet6(0xa, 0x805, 0x0) 22:02:58 executing program 3: signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) 22:02:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x584}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:02:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x4d}]}) 22:02:59 executing program 3: add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ecbdc909c5a0fa0b8c5edc47340074f45190d2dfa01c219dd9e0d11188ed1a02e5774fdaba4068fd47cc05f4a1f5f60f1b4bf96ba7", 0xfffffffffffffde8, 0x0) 22:02:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:59 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 22:02:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 2: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f00000005c0)) 22:02:59 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 22:02:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:02:59 executing program 0: prctl$PR_SET_PDEATHSIG(0x3, 0x0) 22:02:59 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x10000000) 22:02:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:02:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r1, 0xfffffffffffffffe, 0x0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r0, 0x0) 22:03:00 executing program 2: clone3(&(0x7f0000000400)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 22:03:00 executing program 0: prctl$PR_SET_PDEATHSIG(0x27, 0x970000) 22:03:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={0x0}}, 0x0) 22:03:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x30}, {&(0x7f0000000000)="66530700ae897094e7cf269997eaeadec91bb2576cabc1a769", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:03:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:00 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000340)) 22:03:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 451.803487][T17613] ptrace attach of "/root/syz-executor.0"[17612] was attempted by "/root/syz-executor.0"[17613] 22:03:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:00 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) fork() getresuid(&(0x7f00000000c0), 0x0, 0x0) 22:03:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4ed", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 452.147998][T17629] ptrace attach of "/root/syz-executor.2"[17626] was attempted by "/root/syz-executor.2"[17629] 22:03:01 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0xb, r0, 0x0, 0x0, 0xfffffffffffffffd) 22:03:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:01 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xc) [ 452.419776][T17641] ptrace attach of "/root/syz-executor.3"[17639] was attempted by "/root/syz-executor.3"[17641] 22:03:01 executing program 3: alarm(0x632) alarm(0x0) 22:03:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:01 executing program 2: add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x0, 0x0) 22:03:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:01 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:01 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001240)) 22:03:01 executing program 2: clone3(&(0x7f00000004c0)={0x10202800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:03:01 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) 22:03:02 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:02 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x5, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c902) fallocate(r0, 0x3, 0x0, 0x100007e00) 22:03:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25}, {}]}) 22:03:02 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:02 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:02 executing program 2: pipe(&(0x7f0000000300)) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) syz_io_uring_setup(0xee0, &(0x7f00000003c0), &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000d30000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000640)) 22:03:02 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 453.659278][T17687] ptrace attach of "/root/syz-executor.3"[17686] was attempted by "/root/syz-executor.3"[17687] 22:03:02 executing program 0: keyctl$KEYCTL_MOVE(0x13, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x30}]}) 22:03:02 executing program 1: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:02 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) flock(r0, 0x0) 22:03:03 executing program 3: eventfd2(0x0, 0x1000) 22:03:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) getuid() r1 = fork() clone3(&(0x7f0000000400)={0x20000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x33}, &(0x7f0000000300)=""/51, 0x33, &(0x7f0000000340)=""/67, &(0x7f00000003c0)=[r1, r1, 0x0, 0x0, 0x0], 0x5}, 0x58) 22:03:03 executing program 1: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:03 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {0x0, 0x85, 0x6e}]}) 22:03:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da44", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 1: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:03 executing program 0: perf_event_open$cgroup(&(0x7f0000002900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 454.591827][T17727] ptrace attach of "/root/syz-executor.0"[17725] was attempted by "/root/syz-executor.0"[17727] 22:03:03 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000053c0), 0x200002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000005380), r0) 22:03:03 executing program 5: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:03:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:03 executing program 0: setreuid(0xee01, 0x0) setreuid(0x0, 0xee01) 22:03:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:03 executing program 3: keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:04 executing program 5: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:04 executing program 0: keyctl$KEYCTL_MOVE(0x25, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:04 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x10000000) 22:03:04 executing program 5: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:04 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x0) 22:03:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1}, 0x14}}, 0x0) 22:03:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r1, 0xfffffffffffffffe, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) 22:03:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:04 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14000102, 0xb, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000070100000c190000ce1900000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 22:03:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:05 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) r4 = dup2(r1, r2) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 22:03:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:05 executing program 2: mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x8) flock(0xffffffffffffffff, 0x0) 22:03:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 456.331777][T17787] loop0: detected capacity change from 0 to 264192 22:03:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:05 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e40", 0xaa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 456.453760][T17787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e018, mo2=0006] [ 456.491102][T17787] System zones: 1-2, 19-19, 35-38, 46-46 [ 456.575787][T17787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.597505][T17787] ext4 filesystem being mounted at /root/syzkaller-testdir401984657/syzkaller.AHBr2B/466/file0 supports timestamps until 2038 (0x7fffffff) 22:03:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f00000011c0)={0x0}}, 0x28044001) 22:03:05 executing program 0: keyctl$KEYCTL_MOVE(0x10, 0x0, 0x0, 0xfffffffffffffffe, 0x0) [ 456.840499][T17817] ptrace attach of "/root/syz-executor.3"[17815] was attempted by "/root/syz-executor.3"[17817] 22:03:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {0x5}, {}, {}, {}]}) 22:03:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r1, 0xfffffffffffffffe, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 22:03:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd912", 0x89}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:06 executing program 0: keyctl$KEYCTL_MOVE(0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:06 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$incfs(r0, &(0x7f0000002980)='.log\x00', 0x0, 0x0) [ 457.572854][T17848] ptrace attach of "/root/syz-executor.3"[17846] was attempted by "/root/syz-executor.3"[17848] 22:03:06 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 22:03:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:06 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0xc) 22:03:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d}, {}]}) 22:03:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:06 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x10, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245d", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:07 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) 22:03:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 458.277704][T17876] ptrace attach of "/root/syz-executor.0"[17875] was attempted by "/root/syz-executor.0"[17876] 22:03:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:07 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$snapshot(r0, 0x0, 0xf0ff7f00000000) 22:03:07 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x3305, 0x0) 22:03:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 458.584933][T17890] ptrace attach of "/root/syz-executor.0"[17887] was attempted by "/root/syz-executor.0"[17890] 22:03:07 executing program 0: prctl$PR_SET_PDEATHSIG(0x29, 0x0) 22:03:07 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 22:03:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 458.754615][T17894] Restarting kernel threads ... done. 22:03:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:07 executing program 0: clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 22:03:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0xfffffffffffffffd, &(0x7f00000000c0)) 22:03:08 executing program 0: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 22:03:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001500), 0xc0000, 0x0) 22:03:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r2) 22:03:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:09 executing program 3: r0 = clone3(&(0x7f00000002c0)={0xc0001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f00000000c0)=""/190, 0xbe, &(0x7f0000000180)=""/233, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) sched_rr_get_interval(r0, &(0x7f0000000340)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000480)=""/2, 0x2, 0x10023, &(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000016c0)={'wlan1\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe80}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x84}}, 0x24040000) syz_genetlink_get_family_id$fou(&(0x7f0000001880), r1) 22:03:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74}]}) 22:03:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001240)) 22:03:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x94}]}) 22:03:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x16e1}]}) 22:03:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0) 22:03:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x15, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 22:03:13 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:13 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:14 executing program 3: syz_io_uring_setup(0x6cfb, &(0x7f0000000000)={0x0, 0x7f52}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x33d2, &(0x7f0000000100)={0x0, 0xe3d0, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 22:03:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:14 executing program 0: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r2, r0, 0x0) 22:03:14 executing program 0: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:14 executing program 0: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a", 0xbe}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 466.464855][T18163] ptrace attach of "/root/syz-executor.3"[18160] was attempted by "/root/syz-executor.3"[18163] 22:03:15 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x7f}]}) 22:03:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043314, 0x0) 22:03:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 3: syz_open_dev$rtc(&(0x7f0000000b40), 0x3, 0x0) 22:03:15 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:15 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c982) fallocate(r0, 0x3, 0x0, 0x100007e00) 22:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 3: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000980)='./file0\x00') 22:03:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:16 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043314, 0x0) 22:03:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 3: renameat(0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0) 22:03:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {}]}) 22:03:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:16 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.', 0x1, 0xfffffffffffffffb) 22:03:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 0: mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 22:03:17 executing program 3: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/180) 22:03:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:17 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) 22:03:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 3: prctl$PR_SET_PDEATHSIG(0x25, 0x970000) 22:03:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{0x7}, {}, {0x6}]}) prctl$PR_SET_PDEATHSIG(0x4, 0x0) 22:03:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:17 executing program 3: symlinkat(&(0x7f0000000940)='./file0\x00', 0xffffffffffffffff, 0x0) 22:03:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 469.003402][ T26] audit: type=1326 audit(1630533797.929:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 22:03:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:18 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0x11, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffd) 22:03:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) connect(r0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80) 22:03:18 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0x1d, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffd) 22:03:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 22:03:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:18 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) 22:03:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 22:03:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {0x16e1}]}) flock(0xffffffffffffffff, 0x0) 22:03:18 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:18 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x0) 22:03:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:19 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) 22:03:19 executing program 2: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x34}]}) 22:03:19 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) exit_group(0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpriority(0x2, r0) 22:03:19 executing program 0: prctl$PR_SET_PDEATHSIG(0x25, 0x0) 22:03:19 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:19 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:19 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 471.089624][T18357] ptrace attach of "/root/syz-executor.3"[18356] was attempted by "/root/syz-executor.3"[18357] 22:03:20 executing program 3: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 22:03:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:20 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 471.331912][T18369] ptrace attach of "/root/syz-executor.0"[18367] was attempted by "/root/syz-executor.0"[18369] 22:03:20 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) 22:03:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:20 executing program 3: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file0\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 22:03:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:21 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001440), 0x18400, 0x0) 22:03:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:21 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) 22:03:21 executing program 3: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/251) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x7000) 22:03:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:21 executing program 0: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/238, 0xee, 0x0, 0x0}, 0x58) 22:03:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:21 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2d}, {}]}) 22:03:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:21 executing program 3: perf_event_open$cgroup(&(0x7f0000002900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) 22:03:21 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000100)={0x3d, 0x0, 0x1}, 0x0) 22:03:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:21 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) 22:03:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 3: shmget$private(0x0, 0x1000, 0xe5934758acb77d11, &(0x7f0000ffd000/0x1000)=nil) 22:03:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8c902) write$binfmt_script(r0, 0x0, 0x208e24b) 22:03:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 22:03:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040)) sched_rr_get_interval(0x0, &(0x7f0000000080)) 22:03:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x1}, 0x20) 22:03:22 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 22:03:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$snapshot(r0, 0x0, 0x0) 22:03:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f", 0xba}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}, 0x300}, 0x0) 22:03:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 474.346327][T18486] ptrace attach of "/root/syz-executor.3"[18482] was attempted by "/root/syz-executor.3"[18486] 22:03:23 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x4800, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) 22:03:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 4: setreuid(0x0, 0xee01) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 22:03:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:23 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x17, 0x0, 0x3}, 0x0) 22:03:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000440)={'ip6erspan0\x00', @ifru_data=0x0}) 22:03:23 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c77224", 0xb3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="66530700ae897094e7cf269997eaeadec91bb2576cabc1a7", 0x18}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:03:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 475.438708][T18530] ptrace attach of "/root/syz-executor.4"[18528] was attempted by "/root/syz-executor.4"[18530] 22:03:24 executing program 4: clone3(&(0x7f0000000340)={0x400, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/238, 0xee, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 22:03:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x130) [ 475.570112][T18537] ptrace attach of "/root/syz-executor.3"[18536] was attempted by "/root/syz-executor.3"[18537] 22:03:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r0) 22:03:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:24 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x3}]}) 22:03:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) syz_genetlink_get_family_id$fou(&(0x7f0000001880), r0) 22:03:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) 22:03:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:25 executing program 4: prctl$PR_SET_PDEATHSIG(0x1e, 0x0) 22:03:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 3: prctl$PR_SET_PDEATHSIG(0x35, 0x970000) 22:03:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 4: keyctl$KEYCTL_MOVE(0x1a, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$snapshot(r0, &(0x7f0000000000)="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", 0x1000) 22:03:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:25 executing program 4: io_uring_setup(0x37e4, &(0x7f0000000000)) 22:03:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 22:03:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x130) 22:03:26 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0xeb}]}) 22:03:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 3: prctl$PR_SET_PDEATHSIG(0xd, 0x0) 22:03:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$snapshot(r0, &(0x7f0000000080)="ae0846cd5b26814f1b6f8ea24e5b5f94da6a6e7e0d505e745b573035acd13c64890f478667032dbb0ee426d573cddac02dd41a84842be1d3a7bcc0818e14f3a7c610c6f5c6197319605f3199564c3cf905a4e83582078671f152c2a637a9148050b1ba26dbc78cf23f428d0c6639c6b6639c4edfceec6ec98c83998888386428eb6887056e54ff7beb22672a3fcc4f87785556d8c968c8f51c8abd540a5e01605c8a352cc50619a1ad1022f571fe37f6179d20a29fdad5f4292680", 0xffffffffffffffd2) 22:03:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:26 executing program 3: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 22:03:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:26 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b55a1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c126cdb683a00"}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffe, 0x0) 22:03:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245d", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:27 executing program 4: syz_open_dev$rtc(&(0x7f0000000b40), 0x3, 0x200800) 22:03:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 478.351298][T18643] ptrace attach of "/root/syz-executor.3"[18642] was attempted by "/root/syz-executor.3"[18643] 22:03:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x2}, 0x0) 22:03:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 478.600577][T18653] ptrace attach of "/root/syz-executor.3"[18650] was attempted by "/root/syz-executor.3"[18653] 22:03:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x1d, r0, 0x0, 0x0, 0x0) 22:03:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 22:03:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:27 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2}]}) 22:03:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r2, &(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) 22:03:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a703816", 0xc1}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 22:03:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 22:03:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04", 0x95}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 479.494538][T18686] ptrace attach of "/root/syz-executor.4"[18684] was attempted by "/root/syz-executor.4"[18686] 22:03:28 executing program 3: add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 22:03:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 22:03:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 479.836209][T18698] ptrace attach of "/root/syz-executor.4"[18697] was attempted by "/root/syz-executor.4"[18698] 22:03:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x4, 0xd9f, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f0000000180)=""/207, 0xcf}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f00000005c0)=""/36, 0x24}], 0x3, 0x0) 22:03:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000001,errors=remount-ro,nocase,']) 22:03:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x5000}, 0x0) 22:03:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245d", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 480.253459][T18717] FAT-fs (loop3): bogus number of reserved sectors [ 480.303967][T18717] FAT-fs (loop3): Can't find a valid FAT filesystem 22:03:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) chdir(&(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) [ 480.392687][T18717] FAT-fs (loop3): bogus number of reserved sectors [ 480.421074][T18717] FAT-fs (loop3): Can't find a valid FAT filesystem 22:03:29 executing program 4: clock_settime(0x683ea79fed81a1ff, &(0x7f0000000000)={0x77359400}) [ 480.480263][T18732] ptrace attach of "/root/syz-executor.4"[18731] was attempted by "/root/syz-executor.4"[18732] 22:03:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) 22:03:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:29 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) 22:03:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:29 executing program 5: add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) 22:03:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:29 executing program 1: prctl$PR_SET_PDEATHSIG(0x7, 0x0) 22:03:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f", 0xa7}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:30 executing program 5: keyctl$KEYCTL_MOVE(0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:30 executing program 1: syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x40) 22:03:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) 22:03:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:30 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) [ 481.501989][T18778] ptrace attach of "/root/syz-executor.3"[18776] was attempted by "/root/syz-executor.3"[18778] 22:03:30 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000053c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000005380), r0) 22:03:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:30 executing program 5: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)='.', 0x1, 0xfffffffffffffffb) 22:03:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa000}, 0x0) 22:03:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:30 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xc, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:03:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) clock_settime(0x0, &(0x7f0000000100)={r0}) 22:03:31 executing program 1: keyctl$KEYCTL_MOVE(0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:31 executing program 3: add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 22:03:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 5: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) 22:03:31 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x20) 22:03:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) dup(r0) 22:03:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) 22:03:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:31 executing program 5: fork() clone3(&(0x7f0000000400)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:03:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x5}]}) 22:03:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 22:03:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28}, {}]}) 22:03:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 5: openat$incfs(0xffffffffffffffff, &(0x7f0000001680)='.pending_reads\x00', 0x200400, 0x0) 22:03:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 22:03:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 1: fork() clone3(&(0x7f0000000400)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 22:03:32 executing program 5: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 22:03:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 22:03:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:32 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:32 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 22:03:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) 22:03:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x14, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:03:33 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x89, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private}, @GTPA_O_TEI, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}]}, 0xfffffdef}}, 0x0) 22:03:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:33 executing program 5: r0 = clone3(&(0x7f00000002c0)={0xc0001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f00000000c0)=""/190, 0xbe, &(0x7f0000000180)=""/233, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) sched_rr_get_interval(r0, &(0x7f0000000340)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000480)=""/2, 0x2, 0x10023, &(0x7f00000004c0)={0x2, 0x4e22, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wlan1\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe80}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x84}}, 0x24040000) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), 0xffffffffffffffff) 22:03:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) pipe(&(0x7f0000000040)) 22:03:33 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:33 executing program 1: clock_settime(0x6ed940d1469451a4, 0x0) 22:03:33 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) 22:03:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:33 executing program 0: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x6, r0, r1, 0xfffffffffffffffe, 0x0) 22:03:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:34 executing program 3: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 22:03:34 executing program 0: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:34 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x18, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:03:34 executing program 1: clone3(&(0x7f00000002c0)={0xc0001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:03:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:34 executing program 3: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 22:03:34 executing program 0: mkdir(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:34 executing program 3: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 22:03:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e40", 0xaa}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:35 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000001440)='./file0\x00') [ 486.279946][T19022] ptrace attach of "/root/syz-executor.5"[19018] was attempted by "/root/syz-executor.5"[19022] 22:03:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) 22:03:35 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 22:03:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) 22:03:35 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000001440)='./file0\x00') 22:03:35 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) 22:03:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296", 0xc4}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x541b, 0x0) 22:03:36 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) [ 487.301580][T19079] ptrace attach of "/root/syz-executor.1"[19076] was attempted by "/root/syz-executor.1"[19079] 22:03:36 executing program 1: clone3(&(0x7f0000000400)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:03:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:36 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 22:03:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 22:03:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:36 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 22:03:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {}]}) 22:03:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x45}]}) 22:03:36 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:37 executing program 5: prctl$PR_SET_PDEATHSIG(0x3c, 0x0) 22:03:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x11, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:37 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) 22:03:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 22:03:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:37 executing program 1: prctl$PR_SET_PDEATHSIG(0x38, 0x970000) 22:03:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "4ff6f4b05f452f187215dbe1a2f14ada576cc2af75780ec6cd7b92b61eb6439311dee2d5c198d9dc47957ec436352372dd52873b6f640d8d13bb6a4d92f3d008"}, 0x48, r0) 22:03:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 5: keyctl$KEYCTL_MOVE(0x19, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:37 executing program 1: add_key$fscrypt_v1(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 22:03:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) 22:03:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e40", 0xaa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) 22:03:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:37 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="66530700ae897094e7cf269997eaeadec91bb2576cab", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 22:03:38 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.', 0x1, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 489.095363][T19160] ptrace attach of "/root/syz-executor.5"[19157] was attempted by "/root/syz-executor.5"[19160] 22:03:38 executing program 1: syz_io_uring_setup(0xee0, &(0x7f00000003c0), &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000d30000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000640)) 22:03:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xc6}]}) [ 489.221894][T19165] ptrace attach of "/root/syz-executor.3"[19164] was attempted by "/root/syz-executor.3"[19165] 22:03:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:38 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "da9fe833ca7bdd35adb8a9d659b56266dfe9b2422924e56782f49a2e22947f4ccbfcd5957ec10a038c9ed075e39a4eca9ccc3b3a949f74891a48397bc063d501"}, 0x48, 0xfffffffffffffffd) 22:03:38 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) 22:03:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "44b6e41541fc365a45b6347f53d1914191636beffb0a3badaf5ba8bc38d32cf7082ed3212daa176b338256e0bdda477f95ae70d3ddba049349dce59f33176420"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 22:03:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, r1) 22:03:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:38 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 22:03:38 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) 22:03:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:38 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "fd712b7aeb1cb9d1b4f53a9f4df5332c0ca04adaf1e8fab247e79f1080c5be3c0359037ba50a6569eab870b6a43fd3ecc1e24be62bac8a38748f9db572202287"}, 0x48, 0xffffffffffffffff) keyctl$search(0x1d, r0, 0x0, 0x0, 0xfffffffffffffffd) 22:03:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcc", 0xa0}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xf, r0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:39 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r2, r0, 0x0) [ 490.225207][T19211] ptrace attach of "/root/syz-executor.3"[19209] was attempted by "/root/syz-executor.3"[19211] 22:03:39 executing program 3: keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:39 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x7000)=nil, 0x0) 22:03:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:39 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "1e592e71e5ac4a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf20f3609e5b5e141344e51ff2d7b51b7c4f19063d661d0f3e94a476a4f032089bf77"}, 0x48, r0) keyctl$search(0xa, r0, &(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) 22:03:39 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f00000053c0), 0x200002, 0x0) 22:03:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:03:39 executing program 1: shmctl$IPC_SET(0x0, 0x6, 0x0) 22:03:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev, @dev}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000148, 0x4000000, 0x0) 22:03:39 executing program 4: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35}, {}]}) 22:03:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:40 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/144, 0x90) 22:03:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) 22:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50b", 0x8d}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:40 executing program 4: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) [ 491.376253][T19257] ptrace attach of "/root/syz-executor.3"[19256] was attempted by "/root/syz-executor.3"[19257] 22:03:40 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20c0, 0x0) 22:03:40 executing program 3: prctl$PR_SET_PDEATHSIG(0x18, 0x0) 22:03:40 executing program 4: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 491.511576][T19267] ptrace attach of "/root/syz-executor.5"[19264] was attempted by "/root/syz-executor.5"[19267] 22:03:40 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r1, r0, 0x0) 22:03:40 executing program 1: prctl$PR_SET_PDEATHSIG(0x8, 0x970000) 22:03:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:03:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:40 executing program 3: socket$inet6(0xa, 0x805, 0x6) 22:03:40 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:40 executing program 1: r0 = clone3(&(0x7f00000002c0)={0xc0001000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x36}, &(0x7f00000000c0)=""/190, 0xbe, &(0x7f0000000180)=""/233, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) sched_rr_get_interval(r0, &(0x7f0000000340)) getsockname$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000480)=""/2, 0x2, 0x10023, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001540)) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000016c0)={'wlan1\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe80}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x41}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x84}}, 0x24040000) syz_genetlink_get_family_id$fou(&(0x7f0000001880), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r1) 22:03:40 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r1, r0, 0x0) 22:03:41 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\xf7}](-\xbc@$^^!@\xff\x00') 22:03:41 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:41 executing program 3: add_key(&(0x7f0000000040)='blacklist\x00', 0x0, &(0x7f00000000c0)="ec", 0x1, 0x0) 22:03:41 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x8, 0x0, r0, 0xfffffffffffffffe, 0x0) 22:03:41 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:41 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0xa7dca592e7846938) 22:03:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:41 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000013c0), 0x8) getdents64(r0, 0x0, 0x0) 22:03:41 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r1, r0, 0x0) 22:03:41 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x85, 0xa0000}, 0x20) 22:03:42 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "333a37642d047b663c39c401fea3326572955aaa52d49e7c30337107939df662c8ecdcd4520134994ea839c4f6147052ff73ce70d3e87112e86367dae9eecac7"}, 0x48, 0xfffffffffffffffb) 22:03:42 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '('}, 0x2c, 0x0) 22:03:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) setreuid(0xee01, 0xee00) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "1e592e71e5984a55ccba0b379759364b8dab2736787f0e1656ffe0c7e1cbf251ff2dc94a476a4f032089bf7700"}, 0x48, r0) 22:03:42 executing program 1: perf_event_open$cgroup(&(0x7f0000001040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:03:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0xb, r0, r1, 0xfffffffffffffffe, 0x0) 22:03:42 executing program 2: prctl$PR_SET_PDEATHSIG(0x1d, 0x0) 22:03:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, r1) 22:03:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951", 0xbc}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:42 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_hwaddr=@remote}) 22:03:42 executing program 3: keyctl$KEYCTL_MOVE(0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0) [ 493.809220][T19384] ptrace attach of "/root/syz-executor.5"[19381] was attempted by "/root/syz-executor.5"[19384] 22:03:42 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xa0000}, 0x20) 22:03:42 executing program 1: fork() getresuid(&(0x7f00000000c0), 0x0, 0x0) 22:03:42 executing program 2: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) 22:03:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x4, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097ea", 0xe}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x5) 22:03:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:43 executing program 5: keyctl$KEYCTL_MOVE(0x18, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 22:03:43 executing program 1: prctl$PR_SET_PDEATHSIG(0x1c, 0x970000) 22:03:43 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228", 0x74}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="4dc3", 0x2}], 0xffffffffffffffe}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:03:43 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r2, r0, 0x0) [ 494.272542][T19407] ptrace attach of "/root/syz-executor.3"[19406] was attempted by "/root/syz-executor.3"[19407] 22:03:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:43 executing program 5: prctl$PR_SET_PDEATHSIG(0x36, 0x0) 22:03:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x35}]}) [ 494.442367][T19417] ptrace attach of "/root/syz-executor.2"[19416] was attempted by "/root/syz-executor.2"[19417] 22:03:43 executing program 1: symlinkat(&(0x7f0000000940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000980)='./file0\x00') [ 494.580394][T19419] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 22:03:43 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 22:03:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 494.634792][T19419] ref_ctr decrement failed for inode: 0x3620 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000003fb03009 22:03:43 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}}) 22:03:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:43 executing program 1: prctl$PR_SET_PDEATHSIG(0x17, 0x970000) [ 494.932945][T19419] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 494.976934][T19419] ref_ctr decrement failed for inode: 0x3620 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000003fb03009 22:03:43 executing program 2: shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) fork() clone3(&(0x7f0000000400)={0x20000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/51, 0x33, &(0x7f0000000340)=""/67, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 495.325214][T19451] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 495.351190][T19451] ref_ctr decrement failed for inode: 0x3620 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000003fb03009 22:03:44 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_io_uring_setup(0x768e, &(0x7f0000000340), &(0x7f000070e000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(r2, r0, 0x0) 22:03:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 22:03:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:44 executing program 1: prctl$PR_SET_PDEATHSIG(0x2b, 0x0) 22:03:44 executing program 2: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) clone3(&(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22:03:44 executing program 1: alarm(0x4) alarm(0x9) 22:03:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) 22:03:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4a01537edeb18859909f6521daf2aa30a3b5ce1ecd6eba9594f181adda518c061c5a36b29391a71c4336fedbff4d03ef7c295cbbaa77488f6451d71a6cdb683a"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x11, r0, r1, 0xfffffffffffffffe, 0x0) 22:03:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 496.354367][ T26] audit: type=1326 audit(1630533825.274:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=19476 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 22:03:45 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) 22:03:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, &(0x7f0000001c80)=@can, 0x80) 22:03:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 22:03:45 executing program 2: clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800007, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:03:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0xa912d700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 22:03:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:45 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x1e, 0x70}, 0x20) 22:03:45 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10540, 0x0) 22:03:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x0, &(0x7f0000000040)={0x0, 0x0}) 22:03:45 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:45 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 22:03:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:03:46 executing program 5: r0 = memfd_create(&(0x7f0000001b00)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001b40)={{}, "a9e61cb6d694fb557e2c6e354621d139d2c7786a956779c076bfb851d7f85593e55a9877a94587fab3949edc9aa25313506941c0734cb1a6d86ce2d0b2555ad6e884ed8c831bbf6e946f8d10e18a832a828dee7efb64de6da8816ab8cabf2aca81e208afd866a709750c1da427e57db540cce89111b6c465992722465d3c9b197c5d762fc5645792cc7ccfedb2d4008e74f25f9616ea68b87a80f182257612f267affa18a7cf58b0842eab1ff22e325e7ef86f60c1ce86cc86908bbd614a13076b0146ce91c50c89eb95c7f49286c4e45d6ddc3e8fa6635008ef04d59332b3fe9019e1a1e62b1852bc3b05dd6b5ea300f0a253fb019d3a940824ae59491bfe843002bed3ab40e3340a7d78768048aaff692b284aed122f1d7bb968462543de802875551441d76ee72f33f0f26020004f73777161d11aea7de98e9b3ec9ae0873c3ad14a61a280bc54b367adc174d3cfadf896efb02de73bf1901dde8c4de4c1f7bf2afab5c043bace4ecbedfaf77697d891d15a453ef0d1d6ba73257c3b0f652beecdbb98d99e9d1be847535d310e3ff1835b8fed2d9a48668ea06eb577036176ff8f765cacf08f00bf68f1b4591146864ab61a5b2ebafa01a11770bd41a52d151d867040f396dd77bc5f4db2490476031cde48453ba3a432eed0c9a521118117a168119f31f36d212cb50e4f0d3b4d1b5422384fb17d9a9c7c89b4474807ce5a7465af23cd85a7ccf9a4029f7bdec0ca816735c5014903cbd1b97bae420e386bc628074c29fc9326d6fe4624eb619c92dca88bb735e267ce10e904f37cb1c9a7d02c93e57f0ef465438b6bd5716f07e09813ff92efe6e3b063cecf41b99d3e5e0fb3f448ffd34f2eb8837240a96181ee6f45d4413d6c4b26b9d3d95d7040a4fd82195beeadaeac0b10a84ccf916c447bcffac4e053e40c13ea055288b2de6cc8406c13b19924738f5f5fae875da9bb9a45d76f2c9a83db17276ae5adb705b954b6c5b3a0c5af425ac38b69ef051d0939d3a6a78bbd49f06ff9e0b5118c0aac4bea7fdaae9ab4c07c0fddbbf6e52a08d03d9ad97045cd8b052034e755b03c61b81b05bcb5353c85dd873e78e73a6defadd17a71bc0c2a5e00c5a58a1740bc5580eeee504225c9e7bd184102a40a90540f499a1101b25efd2217145779502b5aae20f6c6ee68cb1e2b7e7ebfcaedacb0d3dd1fecadc9284f86b0392ffd8569b2080c754eb3a113278b87eb26c3cc5983c1008462d56be1ab0ab53ce5c68e91641943c089f1c82bdf4e55c909eb5d8537ec6498367d9d558d34e4d494e7b018a87f5d1a6c67711048bf7b87d6c75c727c555f201c41a8d526139d3debfc7c2fa17ab5409d3f70554229e30555dd244eee5b36011ae291a7760cddf8f794fe7a48e7f78f4f712a4a55d8b75d3de62fcbfc3f976a6d0838d32b4f2c7e93230a56a0f85fa3f77670d4de3a6e21e94076f6c2bc7e3560eb603f4e26e4f7ebba8c57830d3451cb6542e9a21a501367c32bb6bf626f37339bf5da0cc69dd1f633b59ba7f5775b3943051f8029e7155354b49d46aec06936786c03579ab532b5f7c2bc0735497c33aa3360f5492ab2c89bdc5634337f424a4ffca4eef945039978c204b559e917d08cc20f0871f8fb61d1381b2440c1cf77cfd42fe9f0276abc869d272d1808f88da57c91bad0c050aa0656b80930834cbd5c4e64c0bc7e3ad990549ad08c1953691c14f7f3de971f7e856dfe1e10b08981da9bcb7bfc0dcc62d62dd93c606491ffc8914db286a51ac898f132f608e2bc7fa365265e4fee09d5e0c48c944c9bbb2bf62cbc527a9edaf5f0dcb5e0f6dfced0820a4bebf59553cf9056305b798221d6268ab28a11a25ee6f0d7858156a3ebed78af33599bfb1534e3cdd802a9e239d5ce50b6461ca449d8eb6dce7bd59050db7f108024a05ece7b1391164561b48d2e7bb4e1e0dec92e19e065b269e8bfbb284fc48161cafea4da194821e71321df946019d461f73a57a7a41926140ee40a1982ebbf212f864064b1fc82b9553788bde08af25b586ed735aa335dfafa27f5a646ddcc187b09f04e3f7008c015b5d1f06e7f75e058a7a4fea5e9e85be1108c28d50dcff2b91b8cd60d16c21751d13a8b49f67b09d1b507a7b05b55b5a1089b0f9d1e1e72975b4a0278b1a9b253234f23f0b3bde5c9d7c4c1326340e1e36cb7fcd4db42cfffa87ac762107e20a6377cfe40d74c65defaeb30f3ef448b918aad0477ddf0cf680a99e3d57b107d88e5e36d07b3051c00e938fb54bfca079a044f320e917bf5728b377cd3321eb6cb7997d75c43eeba92d2481ee20a53d2c39715689ebaf308d5d6b4e89647f8bf9e3a7b107b2966abc1de566805c00794564a556b8a3a26ab0fd9308b6d4fb12b8b5a1d5d2ea26bd90834e9a5195f433189ce7df119e3d28d008b24df08563a9334766b9fd9a7c305333dd29c1a95a44c4f680021fd135e6f355c312dc0aaaf3244f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x20002b41) 22:03:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:03:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001500)) 22:03:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000200), 0x4) 22:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:03:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:46 executing program 1: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) modify_ldt$read_default(0x2, 0x0, 0x0) 22:03:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x2, 0x37) 22:03:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:03:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f00000001c0)) 22:03:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000003c0)='NET_DM\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff) 22:03:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:47 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 22:03:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:03:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:47 executing program 1: socketpair(0x2c, 0x3, 0x200, &(0x7f0000001840)) 22:03:47 executing program 1: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x2020000000}]) 22:03:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 22:03:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 22:03:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:03:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:48 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 22:03:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) 22:03:48 executing program 2: r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x0, 0x0) 22:03:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22}}, 0x0) 22:03:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 22:03:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 22:03:48 executing program 2: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x5cc8ee1ea71a82ec) 22:03:48 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 22:03:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:48 executing program 3: r0 = socket(0x10, 0x2, 0x5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x108}}, 0x0) 22:03:48 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0), 0x80041, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000001100)={0x10}, 0x10) 22:03:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x2020000000}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="823ffc92dfa31217c4", 0x9, 0x0, 0x0, 0x2}, 0x0]) 22:03:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001840)={0x2, 0x0, 0x0, 0x2}, 0x40) 22:03:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:49 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "dad5b9290506f75b187a31114fe0451abd3827b5735e2c6d144fa8286818f98c58f83928c37d34010d74258c525931a1da8d0eb8c3cc6e534c1f637d2db0be"}, 0x60) 22:03:49 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 22:03:49 executing program 1: clock_gettime(0xb, &(0x7f0000000240)) 22:03:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 22:03:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:49 executing program 2: unshare(0x400) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 22:03:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000003880)) 22:03:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:49 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)) 22:03:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={0x0, 0xe695c700000000}}, 0x0) 22:03:49 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 22:03:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, 0x0, 0x0) 22:03:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000022c0)={'ip6_vti0\x00', &(0x7f0000002240)={'sit0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 22:03:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x4759, 0x4) 22:03:49 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0xddd6eed9a033f3b9) [ 500.957156][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.963600][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 22:03:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) 22:03:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="451e000000000000800012800e0001006970366772657461700000006c00028014000700fe80000000000000000000000000004405000800030000000500170001000000060010004e240000060002000800000014000700fc02000000000000000000000000000114000600fc0100000000000000000000000000010400120008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000400740d0040"], 0xb0}}, 0x4004000) 22:03:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 501.157872][ T8516] usb 3-1: new high-speed USB device number 15 using dummy_hcd 22:03:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x77359400}) [ 501.435511][ T8516] usb 3-1: Using ep0 maxpacket: 8 [ 501.555275][ T8516] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 501.857049][ T8516] usb 3-1: string descriptor 0 read error: -22 [ 501.863328][ T8516] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 501.896253][ T8516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.973241][T19658] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 502.229882][ T8545] usb 3-1: USB disconnect, device number 15 [ 503.091746][ T8112] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 503.331254][ T8112] usb 3-1: Using ep0 maxpacket: 8 [ 503.451343][ T8112] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 503.711331][ T8112] usb 3-1: string descriptor 0 read error: -22 [ 503.718128][ T8112] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 503.739310][ T8112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:03:52 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x24, 0xf, 0x0) 22:03:52 executing program 5: socket(0xa, 0x2, 0x6) 22:03:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:52 executing program 3: bpf$MAP_CREATE(0xa, &(0x7f0000000a00), 0x40) 22:03:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:52 executing program 1: socketpair(0x0, 0xb, 0x0, &(0x7f0000000040)) [ 503.790903][ T8112] usb 3-1: can't set config #1, error -71 [ 503.807240][ T8112] usb 3-1: USB disconnect, device number 16 22:03:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x18}, 0x40) 22:03:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 22:03:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:03:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:53 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000000)={0xfffffffffffffffb}, 0x0) 22:03:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f00000000c0)=@framed={{}, [@jmp, @btf_id]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:03:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 22:03:53 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400) 22:03:53 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x29, 0xffffffffffffffff) 22:03:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:53 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) 22:03:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x4759, 0x4) 22:03:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000001a00)='mounts\x00') 22:03:53 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 22:03:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:54 executing program 3: socketpair(0x1, 0x0, 0x3, &(0x7f0000000040)) 22:03:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_ivalue}) 22:03:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 22:03:54 executing program 5: r0 = memfd_create(&(0x7f0000001b00)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001b40)=ANY=[], 0x1001) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1, 0x0, 0x0, 0x0) 22:03:54 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x37, 0xf, 0x0) 22:03:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb4}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, 0x0}, 0x78) 22:03:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x40) 22:03:54 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) 22:03:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000000c0)=@framed={{}, [@jmp, @btf_id]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x8, 0x6}, 0x10}, 0x78) 22:03:54 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "dad5b9290506f75b187a31114fe0451abd3827b5735e2c6d144fa8286818f98c58f83928c37d34010d74258c525931a1da8d0eb8c3cc6e534c1f637d2db0be", 0x1b}, 0x60) 22:03:54 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc020660b, 0x0) 22:03:54 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x16, 0xf, 0x0) 22:03:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:55 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) 22:03:55 executing program 3: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) 22:03:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="451e000000000000800012800e0001006970366772657461700000006c00028014000700fe80000000000000000000000000004405000800030000000500170001000000060010004e240000060002000800000014000700fc02000000000000000000000000000114000600fc"], 0xb0}}, 0x4004000) 22:03:55 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x64, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4, 0x5}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x240, 0x0, 0x2, 0x0, 0x40}, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "aada7f7b7c376cf36e482785e5aecfd8"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0xf6, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) 22:03:55 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x36, 0xf, 0x0) 22:03:55 executing program 1: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 22:03:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 506.424565][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.463660][T19828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 22:03:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 506.616048][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! 22:03:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="451e000000000000800012800e0001006970366772657461700000006c00028014000700fe80000000000000000000000000004405000800030000000500170001000000060010004e240000060002000800000014000700fc02000000000000000000000000000114000600fc"], 0xb0}}, 0x4004000) 22:03:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) [ 506.698740][ T8112] usb 6-1: new high-speed USB device number 6 using dummy_hcd 22:03:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}, 0x0]) [ 506.785914][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! 22:03:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) [ 506.921293][T19847] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.969402][T19849] fuse: Invalid rootmode [ 506.987323][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.996777][ T8112] usb 6-1: Using ep0 maxpacket: 8 22:03:56 executing program 3: r0 = memfd_create(&(0x7f0000001b00)='\x00', 0x0) copy_file_range(r0, &(0x7f0000000000)=0xfffffffffffffd90, r0, 0x0, 0x0, 0x0) 22:03:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="451e000000000000800012800e0001006970366772657461700000006c00028014000700fe80000000000000000000000000004405000800030000000500170001000000060010004e240000060002000800000014000700fc02000000000000000000000000000114000600fc"], 0xb0}}, 0x4004000) [ 507.235233][ T8112] usb 6-1: config 1 interface 0 altsetting 100 bulk endpoint 0x1 has invalid maxpacket 1023 [ 507.271399][ T8112] usb 6-1: config 1 interface 0 has no altsetting 0 [ 507.340477][T19862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.381797][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.555441][ T8112] usb 6-1: language id specifier not provided by device, defaulting to English [ 507.584742][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.413690][ T8112] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.423370][ T8112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.455472][T19825] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 508.623907][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.632306][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.693373][ T2979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.707474][ T8112] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 100 proto 1 vid 0x0525 pid 0xA4A8 [ 508.746435][ T8112] usb 6-1: USB disconnect, device number 6 [ 508.777334][ T8112] usblp0: removed [ 509.472349][ T2979] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 509.712088][ T2979] usb 6-1: Using ep0 maxpacket: 8 [ 509.933866][ T2979] usb 6-1: config 1 interface 0 altsetting 100 bulk endpoint 0x1 has invalid maxpacket 1023 [ 509.944060][ T2979] usb 6-1: config 1 interface 0 has no altsetting 0 22:03:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 22:03:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000b40), 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000800)=ANY=[]) syz_mount_image$f2fs(&(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)) 22:03:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xb1c60, &(0x7f00000013c0)) 22:03:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="451e000000000000800012800e0001006970366772657461700000006c00028014000700fe80000000000000000000000000004405000800030000000500170001000000060010004e240000060002000800000014000700fc02000000000000000000000000000114000600fc"], 0xb0}}, 0x4004000) [ 510.112475][ T2979] usb 6-1: string descriptor 0 read error: -71 [ 510.118781][ T2979] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.192135][ T2979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.259470][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.272056][ T2979] usb 6-1: can't set config #1, error -71 [ 510.292327][T19901] ======================================================= [ 510.292327][T19901] WARNING: The mand mount option has been deprecated and [ 510.292327][T19901] and is ignored by this kernel. Remove the mand [ 510.292327][T19901] option from the mount to silence this warning. [ 510.292327][T19901] ======================================================= [ 510.317855][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.351027][ T2979] usb 6-1: USB disconnect, device number 7 22:03:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @in, @nl=@unspec, @can}) 22:03:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x130) 22:03:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0}}) 22:03:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f00000000c0)=@framed={{}, [@jmp, @btf_id]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xa2, &(0x7f0000000140)=""/162, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x6, 0x20}, 0x10}, 0x78) 22:03:59 executing program 2: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xfffffffffffffffe) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 22:03:59 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x64, 0x1, 0x7, 0x1, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x16, &(0x7f00000000c0)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0xb1, 0x3f}, @ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 22:03:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000180)=@raw=[@generic], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:03:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:03:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 22:03:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 22:03:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:04:00 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000000a40)) 22:04:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:00 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) 22:04:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)="82", 0x1}]) [ 511.210659][ T2979] usb 6-1: new high-speed USB device number 8 using dummy_hcd 22:04:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) 22:04:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) [ 511.490368][ T2979] usb 6-1: Using ep0 maxpacket: 8 [ 511.730076][ T2979] usb 6-1: config 1 interface 0 altsetting 100 bulk endpoint 0x1 has invalid maxpacket 1023 [ 511.741357][ T2979] usb 6-1: config 1 interface 0 has no altsetting 0 [ 512.000514][ T2979] usb 6-1: string descriptor 0 read error: -22 [ 512.006791][ T2979] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 512.017601][ T2979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.061564][T19941] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 512.299767][ T8545] usb 6-1: USB disconnect, device number 8 [ 512.309673][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 513.099037][ T8439] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 513.390328][ T8439] usb 6-1: Using ep0 maxpacket: 8 [ 513.598482][ T8439] usb 6-1: config 1 interface 0 altsetting 100 bulk endpoint 0x1 has invalid maxpacket 1023 [ 513.608956][ T8439] usb 6-1: config 1 interface 0 has no altsetting 0 22:04:02 executing program 5: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) 22:04:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x1f, 0x4) 22:04:02 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3008021, &(0x7f00000001c0)) 22:04:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:02 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 22:04:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x130) [ 513.853755][ T8439] usb 6-1: string descriptor 0 read error: -71 [ 513.888204][ T8439] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 513.933235][ T8439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 22:04:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x4759, 0x4) [ 514.018157][ T8439] usb 6-1: can't set config #1, error -71 [ 514.038929][ T8439] usb 6-1: USB disconnect, device number 9 22:04:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:03 executing program 3: socketpair(0x28, 0x0, 0x28, &(0x7f0000000a40)) 22:04:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={0x0, &(0x7f0000000180)=""/4096, 0x0, 0x1000, 0x1}, 0x20) 22:04:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:04:03 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 22:04:03 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0xffffffffffffff3f) 22:04:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), 0x14) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 22:04:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000180)=@raw=[@generic], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:03 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f00000007c0)) 22:04:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:04:03 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 22:04:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={0x0}, 0x1, 0x0, 0x800e0000}, 0x0) 22:04:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x5f7b024c, 0x0, 0x1}, 0x40) 22:04:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 22:04:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:03 executing program 1: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22:04:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0/file0\x00', 0x0, 0x1801002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 22:04:03 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3409}}, {0xb6, &(0x7f0000000140)=@string={0xb6, 0x3, "8e981cbaa71881dece27a6c707a3c82dcfe137b143a515a2c641ee09e98c10e2749cd4020ea243305b678e3f05c38612780dbc8c5335dec390e3689a5cf186d5ae982d14c488d00f7739f213daeb97903981691d7da83d9c59c987744f09a3e1d7a20681b05acbce1da1d29f2ac643743e8f61b55d8d30d6870177957cc351c626f36e6e03272dc455f5199ab07ca34a31cef4881516070fcd4618572ebc87afb30d4af1594cdccfcc3c5ce49d1ec8057fdb0159"}}]}) 22:04:04 executing program 5: bpf$MAP_CREATE(0x3, 0x0, 0x84) [ 515.217467][ T2979] usb 4-1: new high-speed USB device number 16 using dummy_hcd 22:04:04 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) 22:04:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{0x0, 0x8000000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) [ 515.497482][ T2979] usb 4-1: Using ep0 maxpacket: 32 [ 515.547307][ T1265] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 515.718269][ T2979] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 515.797357][ T1265] usb 3-1: Using ep0 maxpacket: 32 [ 515.917763][ T1265] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 515.938650][ T2979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.967129][ T2979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.984297][ T2979] usb 4-1: Product: syz [ 515.991399][ T2979] usb 4-1: Manufacturer: syz [ 515.996032][ T2979] usb 4-1: SerialNumber: syz [ 516.048691][ T2979] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 516.097719][ T1265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.106839][ T1265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.140588][ T1265] usb 3-1: Product: syz [ 516.157516][ T1265] usb 3-1: Manufacturer: 颎먜ᢧ⟎잦ꌇⷈ넷ꕃꈕ䇆৮賩鱴˔ꈎぃ杛㾎쌅ኆ൸貼㕓쏞驨햆颮ᐭ裄࿐㥷Ᏺ邗脹ᵩ꡽鰽쥙璇ॏꋗ脆媰컋ꄝ鿒옪瑃輾땡赝혰Ƈ長썼왑湮✃쐭騙粰䪣츱裴ᘕ༇䛍團밮꾇ඳ䱙쿜㳌ẝ׈夁 [ 516.187109][ T1265] usb 3-1: SerialNumber: syz [ 516.227945][T20068] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 516.279079][ T8439] usb 4-1: USB disconnect, device number 16 [ 516.456241][ T2979] usb 3-1: USB disconnect, device number 17 [ 517.052375][ T8545] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 517.237565][ T2979] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 517.327641][ T8545] usb 4-1: Using ep0 maxpacket: 32 [ 517.487648][ T2979] usb 3-1: Using ep0 maxpacket: 32 [ 517.567805][ T8545] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 517.637819][ T2979] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.778422][ T8545] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.787807][ T8545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.795902][ T8545] usb 4-1: Product: syz [ 517.802514][ T8545] usb 4-1: Manufacturer: syz [ 517.807130][ T8545] usb 4-1: SerialNumber: syz 22:04:06 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0)={0x20002000}) 22:04:06 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 22:04:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x4000}}], 0x1, 0x0) 22:04:06 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 22:04:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 517.827756][ T2979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.853419][ T8545] usb 4-1: can't set config #1, error -71 [ 517.882274][ T2979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.894634][ T8545] usb 4-1: USB disconnect, device number 17 [ 517.925584][ T2979] usb 3-1: Product: syz [ 517.964290][ T2979] usb 3-1: Manufacturer: 颎먜ᢧ⟎잦ꌇⷈ넷ꕃꈕ䇆৮賩鱴˔ꈎぃ杛㾎쌅ኆ൸貼㕓쏞驨햆颮ᐭ裄࿐㥷Ᏺ邗脹ᵩ꡽鰽쥙璇ॏꋗ脆媰컋ꄝ鿒옪瑃輾땡赝혰Ƈ長썼왑湮✃쐭騙粰䪣츱裴ᘕ༇䛍團밮꾇ඳ䱙쿜㳌ẝ׈夁 22:04:07 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)) 22:04:07 executing program 1: fchmodat(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 518.085974][ T2979] usb 3-1: SerialNumber: syz 22:04:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000200), 0x4) 22:04:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000022c0)={'ip6_vti0\x00', &(0x7f0000002240)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 22:04:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) 22:04:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 518.247862][ T2979] usb 3-1: can't set config #1, error -71 [ 518.255469][ T2979] usb 3-1: USB disconnect, device number 18 22:04:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 22:04:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 22:04:07 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x1f, 0x0, 0x0, 0x0}, 0x20) 22:04:07 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 22:04:07 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 22:04:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000180)=@raw=[@generic, @generic, @alu, @initr0, @generic, @alu], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:04:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000008580)={'ip6gre0\x00', &(0x7f0000008500)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @private0}}) 22:04:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000600)) 22:04:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:04:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000100)="d9a52090ff15c9450dc12da8f745571c80b58fed8e89aaaf30cad4b3cd32205f06bba13c", 0x24}, {&(0x7f0000000140)="22d22ac60b36462ff5f1abddf63ee38657e444b6bdf1032fa874e7085083d71024f91b6bfd027b7034e0a0cc5ba8e0a6ef2279faaaf1ceb9761cef28ff428c58e5cffe965075fc13640cc133424ab3e91e24f2bf0a95041c6efddc1ecc1e517c9b061880b704a22d7f014ef0e368c5d569b4f2cdd61a93886e0886c44e4383abbdd57958bf71cd2031de13aad61d9d7dd64201515a4f32020fc1c3327f91c973d97a679aee84508996ce2620902cb1d91628c4694f03c15ce7741b2d71b20431356fde1530c5a354e65cc2e7676df3674d9c11129784b596fc08c2afb96283ecab6ad6d9c47bd2be9a1b414b4eff5a5783064703783e1944", 0xf8}, {&(0x7f0000000240)="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", 0xd80}], 0x3, &(0x7f0000002400)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @loopback}}}], 0x30}}], 0x1, 0x0) 22:04:08 executing program 2: socketpair(0x18, 0x0, 0x46b, &(0x7f0000000440)) 22:04:08 executing program 5: r0 = getpgrp(0xffffffffffffffff) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f00000000c0), 0x0) 22:04:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) 22:04:08 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x26, 0xf, 0x0) 22:04:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000180)=@raw=[@generic, @generic, @alu, @initr0, @generic, @alu, @generic], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:08 executing program 2: syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x1, &(0x7f0000000880)) 22:04:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) 22:04:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:08 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x2b, 0xf, 0x0) 22:04:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) [ 519.497771][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 519.611040][T20197] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.636798][T20197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 22:04:08 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) [ 519.695514][T20197] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 22:04:08 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) [ 519.761634][T20197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 22:04:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000008c0), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000900)) 22:04:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2, 0x0, 0x0, 0xfffffffc}]}) [ 519.857854][T20197] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.891213][T20197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 519.949440][T20197] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.974400][T20197] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 22:04:09 executing program 5: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}) 22:04:09 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 22:04:09 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x7e) 22:04:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) 22:04:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 520.197745][ T1265] usb 4-1: new high-speed USB device number 18 using dummy_hcd 22:04:09 executing program 5: socket$netlink(0x10, 0x3, 0xa) 22:04:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000080)) 22:04:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f00000000c0)=@framed={{}, [@jmp, @btf_id]}, &(0x7f0000000100)='GPL\x00', 0x65, 0xa2, &(0x7f0000000140)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 520.437949][ T1265] usb 4-1: Using ep0 maxpacket: 32 [ 520.638891][ T1265] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 520.828804][ T1265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.841735][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.860779][ T1265] usb 4-1: Product: syz [ 520.869585][ T1265] usb 4-1: Manufacturer: syz [ 520.878553][ T1265] usb 4-1: SerialNumber: syz [ 520.918948][ T1265] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 521.127499][ T1265] usb 4-1: USB disconnect, device number 18 [ 521.907757][ T1265] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 522.147744][ T1265] usb 4-1: Using ep0 maxpacket: 32 [ 522.348327][ T1265] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 522.518373][ T1265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.527552][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.543203][ T1265] usb 4-1: Product: syz [ 522.547378][ T1265] usb 4-1: Manufacturer: syz [ 522.553535][ T1265] usb 4-1: SerialNumber: syz [ 522.608638][ T1265] cdc_ether: probe of 4-1:1.0 failed with error -22 22:04:11 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) [ 522.818019][ T1265] usb 4-1: USB disconnect, device number 19 22:04:11 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x15, 0xf, 0x0) 22:04:11 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006780), 0x0, 0x0) read$FUSE(r0, &(0x7f00000069c0)={0x2020}, 0x2020) 22:04:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:11 executing program 0: io_setup(0x3, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) 22:04:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'netpci0\x00'}}}}}, 0x34}}, 0x0) 22:04:11 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4030582a, 0x0) 22:04:12 executing program 1: r0 = memfd_create(&(0x7f0000001b00)='\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000001b40)={{}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xfffffdef) 22:04:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 22:04:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:12 executing program 0: syz_mount_image$f2fs(&(0x7f0000000b40), 0x0, 0x0, 0x1, &(0x7f0000000600)=[{0x0}], 0x0, &(0x7f0000000800)=ANY=[]) syz_mount_image$f2fs(0x0, &(0x7f0000000c00)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, 0x0) 22:04:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:12 executing program 2: syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'user_u'}}]}}) 22:04:12 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005200)) 22:04:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:04:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 523.447462][T20320] fuse: Bad value for 'fd' 22:04:12 executing program 0: add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) [ 523.486888][T20320] fuse: Bad value for 'fd' 22:04:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x2020000000}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1000, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0]) 22:04:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 22:04:13 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x1b, 0xf, 0x0) 22:04:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 22:04:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) 22:04:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff7f}], 0x9}}], 0x1, 0x0) 22:04:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x4759, 0x4) 22:04:13 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 22:04:13 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) 22:04:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 524.229590][T20349] ------------[ cut here ]------------ [ 524.262507][T20349] WARNING: CPU: 1 PID: 20349 at mm/page_alloc.c:5348 __alloc_pages+0x45d/0x500 22:04:13 executing program 2: io_setup(0x9, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x3, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2020000000}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) [ 524.319640][T20349] Modules linked in: 22:04:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 524.346455][T20349] CPU: 1 PID: 20349 Comm: syz-executor.0 Not tainted 5.14.0-next-20210901-syzkaller #0 22:04:13 executing program 1: syz_open_procfs(0x0, &(0x7f00000002c0)='timerslack_ns\x00') [ 524.404878][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:04:13 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 524.452472][T20349] RIP: 0010:__alloc_pages+0x45d/0x500 [ 524.469021][T20349] Code: be c9 00 00 00 48 c7 c7 60 1a 97 89 c6 05 5c de a6 0b 01 e8 47 6e 3d 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ae 74 ff ff e9 [ 524.525248][T20349] RSP: 0018:ffffc9000417f790 EFLAGS: 00010246 [ 524.557776][T20349] RAX: 0000000000000000 RBX: 1ffff9200082fef3 RCX: dffffc0000000000 22:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @isdn, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x0, @my=0x0}}) 22:04:13 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000000a40)) 22:04:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x801412, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0/file0\x00', 0x130) [ 524.608574][T20349] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 524.654221][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 524.668893][T20349] R10: ffffffff81b8f8a6 R11: 0000000000000001 R12: ffffffff902661a0 [ 524.696630][T20349] R13: 0000000000000013 R14: 0000000000000000 R15: 00000000ffffffa1 [ 524.723526][T20349] FS: 00007f9677ae9700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 524.754371][T20349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.785590][T20349] CR2: 000000000051d630 CR3: 000000007a0a5000 CR4: 00000000001506e0 [ 524.827597][T20349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.835674][T20349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 524.854788][T20349] Call Trace: [ 524.866920][T20349] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 524.905238][T20349] ? find_held_lock+0x2d/0x110 [ 524.912452][T20349] ? __might_fault+0xd3/0x180 [ 524.917235][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 524.937089][T20349] alloc_pages+0x1a7/0x300 [ 524.953368][T20349] kmalloc_order+0x34/0xf0 [ 524.960273][T20349] kmalloc_order_trace+0x14/0x120 [ 524.965460][T20349] sco_sock_sendmsg+0x18c/0x6a0 [ 524.981134][T20349] ? aa_af_perm+0x230/0x230 [ 524.985765][T20349] ? sco_sock_listen+0x350/0x350 [ 524.996443][T20349] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 525.020616][T20349] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 525.026923][T20349] ? sco_sock_listen+0x350/0x350 [ 525.037655][T20349] sock_sendmsg+0xcf/0x120 [ 525.042189][T20349] ____sys_sendmsg+0x331/0x810 [ 525.046990][T20349] ? kernel_sendmsg+0x50/0x50 [ 525.061795][T20349] ? do_recvmmsg+0x6d0/0x6d0 [ 525.066716][T20349] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 525.076974][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.091018][T20349] ___sys_sendmsg+0xf3/0x170 [ 525.095671][T20349] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.115774][T20349] ? __fget_files+0x21b/0x3e0 [ 525.127080][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.139715][T20349] ? futex_wait_restart+0x200/0x200 [ 525.145075][T20349] ? __fget_files+0x23d/0x3e0 [ 525.156806][T20349] ? __fget_light+0xea/0x280 [ 525.163662][T20349] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 525.177925][T20349] __sys_sendmmsg+0x195/0x470 [ 525.182838][T20349] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 525.197807][T20349] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 525.207218][T20349] ? find_held_lock+0x2d/0x110 [ 525.231999][T20349] ? __context_tracking_exit+0xb8/0xe0 [ 525.255540][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.275702][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.286724][T20349] __x64_sys_sendmmsg+0x99/0x100 [ 525.300895][T20349] ? syscall_enter_from_user_mode+0x21/0x70 [ 525.311169][T20349] do_syscall_64+0x35/0xb0 [ 525.315632][T20349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 525.323042][T20349] RIP: 0033:0x4665f9 [ 525.326972][T20349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.354924][T20349] RSP: 002b:00007f9677ae9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 525.372396][T20349] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 525.384470][T20349] RDX: 0000000000000001 RSI: 0000000020001d00 RDI: 0000000000000004 [ 525.402020][T20349] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 525.416206][T20349] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 525.445496][T20349] R13: 00007fff2f8e668f R14: 00007f9677ae9300 R15: 0000000000022000 [ 525.454685][T20349] Kernel panic - not syncing: panic_on_warn set ... [ 525.461297][T20349] CPU: 1 PID: 20349 Comm: syz-executor.0 Not tainted 5.14.0-next-20210901-syzkaller #0 [ 525.471066][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.481140][T20349] Call Trace: [ 525.484462][T20349] dump_stack_lvl+0xcd/0x134 [ 525.489157][T20349] panic+0x2b0/0x6dd [ 525.493310][T20349] ? __warn_printk+0xf3/0xf3 [ 525.497939][T20349] ? __warn.cold+0x1a/0x44 [ 525.502407][T20349] ? __alloc_pages+0x45d/0x500 [ 525.507200][T20349] __warn.cold+0x35/0x44 [ 525.511466][T20349] ? __alloc_pages+0x45d/0x500 [ 525.516257][T20349] report_bug+0x1bd/0x210 [ 525.520685][T20349] handle_bug+0x3c/0x60 [ 525.524958][T20349] exc_invalid_op+0x14/0x40 [ 525.529480][T20349] asm_exc_invalid_op+0x12/0x20 [ 525.534357][T20349] RIP: 0010:__alloc_pages+0x45d/0x500 [ 525.539844][T20349] Code: be c9 00 00 00 48 c7 c7 60 1a 97 89 c6 05 5c de a6 0b 01 e8 47 6e 3d 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ae 74 ff ff e9 [ 525.559520][T20349] RSP: 0018:ffffc9000417f790 EFLAGS: 00010246 [ 525.565786][T20349] RAX: 0000000000000000 RBX: 1ffff9200082fef3 RCX: dffffc0000000000 [ 525.573898][T20349] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 525.581924][T20349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 525.590028][T20349] R10: ffffffff81b8f8a6 R11: 0000000000000001 R12: ffffffff902661a0 [ 525.598109][T20349] R13: 0000000000000013 R14: 0000000000000000 R15: 00000000ffffffa1 [ 525.606105][T20349] ? policy_node+0xd6/0x110 [ 525.610645][T20349] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 525.617445][T20349] ? find_held_lock+0x2d/0x110 [ 525.622241][T20349] ? __might_fault+0xd3/0x180 [ 525.626956][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.631839][T20349] alloc_pages+0x1a7/0x300 [ 525.636295][T20349] kmalloc_order+0x34/0xf0 [ 525.641090][T20349] kmalloc_order_trace+0x14/0x120 [ 525.646141][T20349] sco_sock_sendmsg+0x18c/0x6a0 [ 525.651010][T20349] ? aa_af_perm+0x230/0x230 [ 525.655537][T20349] ? sco_sock_listen+0x350/0x350 [ 525.660577][T20349] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 525.666855][T20349] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 525.673127][T20349] ? sco_sock_listen+0x350/0x350 [ 525.678091][T20349] sock_sendmsg+0xcf/0x120 [ 525.682530][T20349] ____sys_sendmsg+0x331/0x810 [ 525.687328][T20349] ? kernel_sendmsg+0x50/0x50 [ 525.692022][T20349] ? do_recvmmsg+0x6d0/0x6d0 [ 525.696637][T20349] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 525.702646][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.707523][T20349] ___sys_sendmsg+0xf3/0x170 [ 525.712134][T20349] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.717444][T20349] ? __fget_files+0x21b/0x3e0 [ 525.722145][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.727017][T20349] ? futex_wait_restart+0x200/0x200 [ 525.732343][T20349] ? __fget_files+0x23d/0x3e0 [ 525.737055][T20349] ? __fget_light+0xea/0x280 [ 525.741670][T20349] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 525.747942][T20349] __sys_sendmmsg+0x195/0x470 [ 525.752649][T20349] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 525.757700][T20349] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 525.763748][T20349] ? find_held_lock+0x2d/0x110 [ 525.768551][T20349] ? __context_tracking_exit+0xb8/0xe0 [ 525.774035][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.778917][T20349] ? lock_downgrade+0x6e0/0x6e0 [ 525.783813][T20349] __x64_sys_sendmmsg+0x99/0x100 [ 525.788774][T20349] ? syscall_enter_from_user_mode+0x21/0x70 [ 525.794694][T20349] do_syscall_64+0x35/0xb0 [ 525.799135][T20349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 525.805065][T20349] RIP: 0033:0x4665f9 [ 525.808981][T20349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.828625][T20349] RSP: 002b:00007f9677ae9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 525.837222][T20349] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 525.845304][T20349] RDX: 0000000000000001 RSI: 0000000020001d00 RDI: 0000000000000004 [ 525.853295][T20349] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 525.861288][T20349] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 525.869281][T20349] R13: 00007fff2f8e668f R14: 00007f9677ae9300 R15: 0000000000022000 [ 525.878778][T20349] Kernel Offset: disabled [ 525.883196][T20349] Rebooting in 86400 seconds..