00000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 18:26:51 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000001c0)='$/\xcc8\\\xcc\x00') 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r6, 0x0, 0x0) 18:26:52 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) 18:26:52 executing program 5: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000024c0)={'wlan0\x00'}) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000001c0)='$/\xcc8\\\xcc\x00') 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r6, 0x0, 0x0) 18:26:52 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) 18:26:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000001c0)='$/\xcc8\\\xcc\x00') 18:26:52 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x2004c841) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='cifs.idmap\x00', 0x0) 18:26:52 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='cifs.idmap\x00', 0x0) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x2004c841) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) 18:26:52 executing program 0: socketpair(0x2, 0x80000, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, 0x0) 18:26:52 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='cifs.idmap\x00', 0x0) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x2004c841) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 0: socketpair(0x0, 0x80000, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) socketpair(0x25, 0xa, 0xffffff81, &(0x7f0000000680)) 18:26:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 0: socketpair(0x0, 0x80000, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) 18:26:52 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x6, 0x10001}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000040)={0x81, 0xfffffff9, 0x4}) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:52 executing program 0: socketpair(0x0, 0x80000, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000180)=@raw=[@map={0x18, 0x3, 0x1, 0x0, 0x1}, @generic={0x40, 0x9, 0x7, 0x2, 0x8}, @generic={0xdf, 0xb, 0x9, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0x51}, @map={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe5a}, @map={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x4, 0xa4, &(0x7f0000000240)=""/164, 0x40f00, 0x4, [], 0x0, 0x1c, r4, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0x0, 0x100}, 0x10}, 0x78) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) 18:26:52 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x6, 0x10001}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000040)={0x81, 0xfffffff9, 0x4}) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 0: socketpair(0x2, 0x0, 0xb13b, &(0x7f0000000100)) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000400000d000000001000000005000000050000000200000010000000020000000d000000000000000f0000000000000e0200000001000000000061001dfeff7142dea16737ef1d3b807c8a4325"], &(0x7f0000000440)=""/196, 0x58, 0xc4, 0x1}, 0x20) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r3) 18:26:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:52 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x6, 0x10001}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000040)={0x81, 0xfffffff9, 0x4}) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000100)) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) 18:26:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 18:26:53 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000100)) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x6, 0x10001}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x31}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x6, 0x10001}) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000100)) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, 0x0, &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 0: socketpair(0x2, 0x0, 0xb13b, 0x0) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, 0x0, &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, 0x0, &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, r0) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', 0x0, r0) 18:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', 0x0, r0) 18:26:53 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = add_key$fscrypt_v1(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000440)={0x0, "e41ea4eef56b2146bcf0d2aeb7f9f58b4b6d43375c3b5839a169fbcd9c8d6b25e67e547505590450ebf39bdbedd108ade151d4ef2f6e5770e3386c961721f73d", 0x31}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="95be7ee7be42794dfa71c7eefec6273c8930a563fa2357fc5058db75ab24681781e994b1", 0x24, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) socket$nl_generic(0x10, 0x3, 0x10) 18:26:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='logon\x00', r0) r1 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', 0x0, r0) 18:26:53 executing program 0: r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) waitid(0x0, r0, 0x0, 0x20000004, 0x0) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "ded0c379accff5187cfd758625bb9015b2d0b56d1a609e30c7d39a407b75df94f39feef645f3a119a7530db66ccbfa6d57e5f1391b2d8086a60968ff711176b6", 0x30}, 0x48, 0xfffffffffffffffb) r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0) 18:26:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 0: r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) waitid(0x0, r0, 0x0, 0x20000004, 0x0) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:53 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x15, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x341280, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvfrom$netrom(r3, &(0x7f0000000200)=""/254, 0xfe, 0x1, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x40, 0x15, 0x400, 0x70bd2b, 0x25dfdbfb, {0xa, 0x18, 0x8d, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4004) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x4) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:53 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:53 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000000c0)={0x0, "1028d8773327bb410d61b9677c8779c460280d134a342784efa92960d3620f03dfc69644a0a7db6e59b0e38a3fed628c73d837675e03c6536af2de1a7e35dacc", 0x12}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400201, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc001, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xc6, 0x2a, [@mic={0x8c, 0x18, {0x9ae, "c1b47dc13637", @long="384da5c3d253a6da7c00ba245f95c4a0"}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x2, 0x0, @device_b, 0x2, 0x5, 0x9}}, @fast_bss_trans={0x37, 0x87, {0x4, 0x3, "95a9d94a0da6665bfc2eeb59511aeca3", "3c4409fc517bf7577e028f72d011fa4840dfe7bb7ed895abfb50f30a388e59fd", "20f765e2b0a3c3d4a3cb27b85a2f255ea28e17635af3e2f014bd8e040f08806c", [{0x2, 0x11, "c7c340c967f30aebd16692e7b3589af532"}, {0x1, 0x1d, "cf2b8fb513a40e4ab642d49ed33c45566d0950d8cddb69060d9ca4b5fd"}, {0x3, 0x1, 'P'}]}}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x81}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(0x0, &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131440, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000), 0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0xe523, 0x6, &(0x7f0000000040)=0x2668b3b6}) 18:26:54 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc001, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xc6, 0x2a, [@mic={0x8c, 0x18, {0x9ae, "c1b47dc13637", @long="384da5c3d253a6da7c00ba245f95c4a0"}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x2, 0x0, @device_b, 0x2, 0x5, 0x9}}, @fast_bss_trans={0x37, 0x87, {0x4, 0x3, "95a9d94a0da6665bfc2eeb59511aeca3", "3c4409fc517bf7577e028f72d011fa4840dfe7bb7ed895abfb50f30a388e59fd", "20f765e2b0a3c3d4a3cb27b85a2f255ea28e17635af3e2f014bd8e040f08806c", [{0x2, 0x11, "c7c340c967f30aebd16692e7b3589af532"}, {0x1, 0x1d, "cf2b8fb513a40e4ab642d49ed33c45566d0950d8cddb69060d9ca4b5fd"}, {0x3, 0x1, 'P'}]}}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x81}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000001c0)=0x8001) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc001, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xc6, 0x2a, [@mic={0x8c, 0x18, {0x9ae, "c1b47dc13637", @long="384da5c3d253a6da7c00ba245f95c4a0"}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x2, 0x0, @device_b, 0x2, 0x5, 0x9}}, @fast_bss_trans={0x37, 0x87, {0x4, 0x3, "95a9d94a0da6665bfc2eeb59511aeca3", "3c4409fc517bf7577e028f72d011fa4840dfe7bb7ed895abfb50f30a388e59fd", "20f765e2b0a3c3d4a3cb27b85a2f255ea28e17635af3e2f014bd8e040f08806c", [{0x2, 0x11, "c7c340c967f30aebd16692e7b3589af532"}, {0x1, 0x1d, "cf2b8fb513a40e4ab642d49ed33c45566d0950d8cddb69060d9ca4b5fd"}, {0x3, 0x1, 'P'}]}}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x81}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000), 0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0xe523, 0x6, &(0x7f0000000040)=0x2668b3b6}) 18:26:54 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000), 0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x0, 0xe523, 0x6, &(0x7f0000000040)=0x2668b3b6}) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc001, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0xc6, 0x2a, [@mic={0x8c, 0x18, {0x9ae, "c1b47dc13637", @long="384da5c3d253a6da7c00ba245f95c4a0"}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x2, 0x0, @device_b, 0x2, 0x5, 0x9}}, @fast_bss_trans={0x37, 0x87, {0x4, 0x3, "95a9d94a0da6665bfc2eeb59511aeca3", "3c4409fc517bf7577e028f72d011fa4840dfe7bb7ed895abfb50f30a388e59fd", "20f765e2b0a3c3d4a3cb27b85a2f255ea28e17635af3e2f014bd8e040f08806c", [{0x2, 0x11, "c7c340c967f30aebd16692e7b3589af532"}, {0x1, 0x1d, "cf2b8fb513a40e4ab642d49ed33c45566d0950d8cddb69060d9ca4b5fd"}, {0x3, 0x1, 'P'}]}}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x81}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18000, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', 0x0, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc001, 0x0) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc001, 0x0) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc001, 0x0) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0xc001, 0x0) 18:26:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 0: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x200480c4) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 0: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:54 executing program 5: add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 18:26:54 executing program 0: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:54 executing program 5: add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:54 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 18:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:55 executing program 5: add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 3: add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)='\x00') 18:26:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000500)='\x00') 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x28b62cd80ac8b81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x504, 0x0, 0x308, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xb7, 0x45, "ebfc25f228dd3862c32fa814df4419b0455ed0f3d83d17d4771d5a395722cca234a8cc6505d784c70aea8453ede4cc8b866f3e31364a79091fb10808061d3632e91999e60daa40d61df17efe26e843c57c416cd97a04a7e2a9942632f6c9b850d5a9286c53ea36350efe22f08e28c3a82fb951de2aec3724778f8f05a3c68aa51a99c8f9609c795f0b7738d3503ecc9fbcf734b45849a2ad2d084020855b0ef5b572635747979eaa4f73bcd1474a39875ff6d4"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "1ba6039d57a05c46394067d81a65141ab957e5dc8c111d6af323607d58de3d352cf1a85e519d4b2ac0c9d37af793c561198c3109def081320aa5fb977ca8df7e702ce578287051eb92c4baac940b36440361c4438b34a452e7e3be99480a1ee0de5e6d41aefa7dfe2fbf2c739f683e97adad175e0000000000"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "ed664790f2a37bc1861a311abb40932bed426e8243fdd9ce9a42243c94e329c65bb35fe3b7330a41d805f233c1f650e5c1fe6b56300ce11ea3f15d07f700b4cd5b4d51af5ebbd998d3e4c4c24fe7dd79bb7057cf08675a257a234824b4c4789e1c28db4715b62421bb8b9da3980d6e0bfa2eab56c137d697aa55ccfd400d31f66d75d97a5928da77b820e346c22b2713c0e0c947e68c1e542e3d8679b127c45bb9bfcf0888d9fcce90654701d0866c673af46abab6"}, @NL80211_ATTR_TESTDATA={0xa7, 0x45, "9f6ca59ff76bf9b39542f38bf4b07735abcdab5b8b7e8009a4da292350ba11fe28f3fe35236c07afca8a784c758b802587a7ed745591182d4c4f36b9cba4935c4b4824b4cd2288123dc738fe6516c680458efc32f0798c9ea5edb657326903def6394db7e9078d53d6e2b3b1c4cbc0354c19cd46edf504c73f27d0e450a0a8f9cb71d9cbc8021c38c379fcae16c7705663de7bc8beb8e0a13f932a465f081216fa0cc8"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "ed3e99443e140a56cef59a968f9a27012f587ca162286418a740f018a02160a1207a88ac41d3c21fe7764340f4906668a31dd10a3009ff0d33f9509ea250e66c0d703239eef736e6162b86d0d3f19320475579b8c6c419a04a7334996f"}, @NL80211_ATTR_TESTDATA={0x72, 0x45, "94c3b75dea370b4fee6b27cbfbdf7c7bebea848d2461f787d5a62484a6fb7b86698afb3897edb3b09dfb866cc3e544cf3251179242f29b11d5d2e9f66b817c28612af630a87508ca3fa0861cd89ee1c42f6ef4b6017799a22e87f6b57d245de33caa927430e2cb1271969c988a1a"}, @NL80211_ATTR_TESTDATA={0xf9, 0x45, "d99e01b1ee863e0ee61f062f51914fa377caa199f83ca284765a27aac6758b452159e730b525ff7094e20eebcc7a392cd23aa0f4df3f9946bc5ac70d338762509e3af8bbf649ef7ede353a9a54a7545b260ff825b1170c7891ad01982c9d9fdab9209b449e8e463fc4237cb5a4eef4cc4ef510730b0ff91feed36895ac5c371bebaa8fc9a2f8ae38a8d76c7634436468b2adb97f2fc71bd2d627ec5c18ea8fb59ef86901bc6444a22423baf3340bcdcb4f4f890a48b56f6c6a3319cfb4a71074e9beb20f695ccb8ff59de1135f97981863c95e024bca3da3ade360cd7c67cd959d4d15ff3639541b5fcc2ad574a7a3a084add32420"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "971cf111768697143956f59739cd628a7aa4d57d874e5d85b1493cd2b86dfa0354b362628e955892592ef5434726cc0a645a14e624b16eaef2119d02eb7b8b385c9fe99c915a5128207f9f924169a61850e715a6f9f3f3e5e0a9d8953ae49b2eb8c71003a9c9f29851f1e035357e017eaf2951809be84292df"}]}, 0x504}, 0x1, 0x0, 0x0, 0x4050}, 0x4804) socket$packet(0x11, 0x3, 0x300) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000600)={0x6}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x34, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x89, 0x31}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x440, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000640)) keyctl$clear(0x7, 0xffffffffffffffff) 18:26:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101881, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000500)='\x00') 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000500)='\x00') 18:26:55 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000), 0xfffffffffffffdd5) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', 0x0) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', 0x0) 18:26:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) geteuid() add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000000c0)={0x0, "bbddbc7daef3a63254b490e51fefd1ab195034337bb8ff7d0c730488a68f3320c89b76b7359a5afa0fe9295e55bb5fce9c2abc835ac223fcf0a880b479bbcedd", 0x3e}, 0x48, 0xfffffffffffffffe) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x880) 18:26:55 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000004c0)='id_resolver\x00', 0x0) 18:26:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) geteuid() add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000000c0)={0x0, "bbddbc7daef3a63254b490e51fefd1ab195034337bb8ff7d0c730488a68f3320c89b76b7359a5afa0fe9295e55bb5fce9c2abc835ac223fcf0a880b479bbcedd", 0x3e}, 0x48, 0xfffffffffffffffe) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x880) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) 18:26:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xfffffced) 18:26:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) geteuid() add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000000c0)={0x0, "bbddbc7daef3a63254b490e51fefd1ab195034337bb8ff7d0c730488a68f3320c89b76b7359a5afa0fe9295e55bb5fce9c2abc835ac223fcf0a880b479bbcedd", 0x3e}, 0x48, 0xfffffffffffffffe) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x880) 18:26:55 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) 18:26:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0xc367db7f206b45e0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x20, 0x4d}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x7, 0x1000, 0x189, 0x401, 0x200, 0x8, 0x81, 0x3, 0x7, 0x865, 0x7, 0xff, 0x3f, 0x5, 0x5]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4045) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x305, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) geteuid() add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000000c0)={0x0, "bbddbc7daef3a63254b490e51fefd1ab195034337bb8ff7d0c730488a68f3320c89b76b7359a5afa0fe9295e55bb5fce9c2abc835ac223fcf0a880b479bbcedd", 0x3e}, 0x48, 0xfffffffffffffffe) 18:26:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0) 18:26:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:55 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0xc367db7f206b45e0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x20, 0x4d}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x7, 0x1000, 0x189, 0x401, 0x200, 0x8, 0x81, 0x3, 0x7, 0x865, 0x7, 0xff, 0x3f, 0x5, 0x5]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4045) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) geteuid() 18:26:55 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0xc367db7f206b45e0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x20, 0x4d}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x7, 0x1000, 0x189, 0x401, 0x200, 0x8, 0x81, 0x3, 0x7, 0x865, 0x7, 0xff, 0x3f, 0x5, 0x5]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048080}, 0x4045) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x401, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x204000, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) 18:26:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:56 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "7ae8c4b7d8c431e0511607633afc7dc3f69499fd5045e5830cd505b23eb0a83e80620ca8f28d38c006e0ae1608b86b9b0aa3946b379d740fa42ccd1a817d0151", 0x19}, 0x48, r2) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, 0x0) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "7ae8c4b7d8c431e0511607633afc7dc3f69499fd5045e5830cd505b23eb0a83e80620ca8f28d38c006e0ae1608b86b9b0aa3946b379d740fa42ccd1a817d0151", 0x19}, 0x48, r2) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, 0x0) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:56 executing program 3: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000002300)='logon\x00', &(0x7f0000002340)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000002380)={0x0, "4ef8c47869d366727cf8d57896395e9d3f6632d673d8098601b255ae3dd124d39d85c418f70e6bd49f011fb74c89d146ac6c098ad8e6e4c4f5b40d0b54cf0451"}, 0x48, 0xffffffffffffffff) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "7ae8c4b7d8c431e0511607633afc7dc3f69499fd5045e5830cd505b23eb0a83e80620ca8f28d38c006e0ae1608b86b9b0aa3946b379d740fa42ccd1a817d0151", 0x19}, 0x48, r2) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, 0x0) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 18:26:56 executing program 3: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x200480c4) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "7ae8c4b7d8c431e0511607633afc7dc3f69499fd5045e5830cd505b23eb0a83e80620ca8f28d38c006e0ae1608b86b9b0aa3946b379d740fa42ccd1a817d0151", 0x19}, 0x48, r1) 18:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18:26:56 executing program 3: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000100)={0x0, "7ae8c4b7d8c431e0511607633afc7dc3f69499fd5045e5830cd505b23eb0a83e80620ca8f28d38c006e0ae1608b86b9b0aa3946b379d740fa42ccd1a817d0151", 0x19}, 0x48, r1) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 3: userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 3: userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 18:26:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 0: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4c000) 18:26:56 executing program 3: userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x23}) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x200480c4) 18:26:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x200480c4) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) 18:26:56 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="e82cafb664a6311b81262775cc928a9b96479d6cda8e3ebf9eb530690945be2221c28a7839f436691976028383b406a9357a67f32d38e2127e6f82a41d3e51e104cfc75346528bfd023cec5dfeb23a43a958039547189056b609865eac6f79568994a89d68573780f63f55c35731fa6e7a1c6fa97bf45b9bc64a8fa5bfc3bb39bb810a5410bae365986ea8ac769c3f5afa5b0ba241c3032a414bd75380a77e98b8b215054984dee221accd42f60c6116a5ed95e6789884b41b104a72aed53fbc055c2e7d604568ab6b8c634346ef3ca8cdf0b40b1f8f77982f0199ad50c8e53b31465637054a904a3a58c46509bed425958be280f284aeb95662e4c6", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x4, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x1, @bcast, @bpq0='bpq0\x00', 0x7facf5f8, 'syz1\x00', @null, 0x3, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 18:26:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) 18:26:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 18:26:56 executing program 4: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) socket$packet(0x11, 0x2, 0x300) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) 18:26:56 executing program 1: add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) 18:26:56 executing program 4: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1100048}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2308}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0xa95ab4a2b5d45b0a}, 0x20000004) 18:26:56 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000040)={0x10001, 0x402}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000), 0x4) 18:26:56 executing program 0: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x54, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x470a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x373}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x54}}, 0x4000) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r2, {0x8}}, 0x18) 18:26:56 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) 18:26:57 executing program 1: add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000001c0)={0x0, 0x80}) 18:26:57 executing program 1: add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="e82cafb664a6311b81262775cc928a9b96479d6cda8e3ebf9eb530690945be2221c28a7839f436691976028383b406a9357a67f32d38e2127e6f82a41d3e51e104cfc75346528bfd023cec5dfeb23a43a958039547189056b609865eac6f79568994a89d68573780f63f55c35731fa6e7a1c6fa97bf45b9bc64a8fa5bfc3bb39bb810a5410bae365986ea8ac769c3f5afa5b0ba241c3032a414bd75380a77e98b8b215054984dee221accd42f60c6116a5ed95e6789884b41b104a72aed53fbc055c2e7d604568ab6b8c634346ef3ca8cdf0b40b1f8f77982f0199ad50c8e53b31465637054a904a3a58c46509bed425958be280f284aeb95662e4c6", 0xfc, 0xfffffffffffffffb) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xd4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1e, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/213, 0xd5, 0x0, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/255, 0xff, 0x2, 0x1e}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/191, 0xbf, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x3f, 0x0, &(0x7f0000000740)="33246d53d3b36b3c90a7d9212f3a2cda30ed92cc201adf0f6bd9f0554d47d525a5325af98c7d2772379b08ee9a053deef46e773a228fb5b020657709045c69"}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 18:26:57 executing program 4: r0 = getpid() getpid() r1 = gettid() wait4(r1, 0x0, 0x1, &(0x7f0000000140)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) waitid(0x1, r0, 0x0, 0x8, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 1: add_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000001c0)={0x0, 0x80}) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xd4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1e, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/213, 0xd5, 0x0, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/255, 0xff, 0x2, 0x1e}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/191, 0xbf, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x3f, 0x0, &(0x7f0000000740)="33246d53d3b36b3c90a7d9212f3a2cda30ed92cc201adf0f6bd9f0554d47d525a5325af98c7d2772379b08ee9a053deef46e773a228fb5b020657709045c69"}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 18:26:57 executing program 4: r0 = getpid() getpid() r1 = gettid() wait4(r1, 0x0, 0x1, &(0x7f0000000140)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) waitid(0x1, r0, 0x0, 0x8, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000001c0)={0x0, 0x80}) 18:26:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) 18:26:57 executing program 1: add_key(&(0x7f0000000180)='blacklist\x00', 0x0, &(0x7f0000000200)="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", 0xfc, 0xfffffffffffffffb) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) 18:26:57 executing program 4: r0 = getpid() getpid() r1 = gettid() wait4(r1, 0x0, 0x1, &(0x7f0000000140)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) waitid(0x1, r0, 0x0, 0x8, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xd4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1e, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/213, 0xd5, 0x0, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/255, 0xff, 0x2, 0x1e}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/191, 0xbf, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x3f, 0x0, &(0x7f0000000740)="33246d53d3b36b3c90a7d9212f3a2cda30ed92cc201adf0f6bd9f0554d47d525a5325af98c7d2772379b08ee9a053deef46e773a228fb5b020657709045c69"}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) 18:26:57 executing program 1: add_key(&(0x7f0000000180)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) 18:26:57 executing program 4: r0 = getpid() getpid() r1 = gettid() wait4(r1, 0x0, 0x1, &(0x7f0000000140)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) waitid(0x1, r0, 0x0, 0x8, 0x0) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xd4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x9, 0x1, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1e, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/213, 0xd5, 0x0, 0x20}, @fda={0x66646185, 0x6, 0x1, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/255, 0xff, 0x2, 0x1e}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/191, 0xbf, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x3f, 0x0, &(0x7f0000000740)="33246d53d3b36b3c90a7d9212f3a2cda30ed92cc201adf0f6bd9f0554d47d525a5325af98c7d2772379b08ee9a053deef46e773a228fb5b020657709045c69"}) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) 18:26:57 executing program 3: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') 18:26:57 executing program 4: getpid() getpid() r0 = gettid() wait4(r0, 0x0, 0x1, &(0x7f0000000140)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) 18:26:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x3ff, 0x6}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) 18:26:57 executing program 4: getpid() getpid() r0 = gettid() wait4(r0, 0x0, 0x1, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 3: getpid() getpid() r0 = gettid() wait4(r0, 0x0, 0x1, &(0x7f0000000140)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x22200, 0x0) clock_gettime(0x6, &(0x7f0000000100)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) getpid() add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 4: getpid() getpid() r0 = gettid() wait4(r0, 0x0, 0x1, &(0x7f0000000140)) clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:57 executing program 4: getpid() getpid() gettid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='ceph\x00', &(0x7f0000000180)='(&\x00') 18:26:57 executing program 0: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 3: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 4: getpid() getpid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:57 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:57 executing program 3: getpid() getpid() gettid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 4: getpid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:57 executing program 5: socketpair(0xf, 0x4, 0x7, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:58 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 3: getpid() getpid() gettid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 0: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) getpid() add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 3: getpid() getpid() gettid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 1: ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x80) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 0: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 3: getpid() getpid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 1: add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 0: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 3: getpid() clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 1: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 3: clock_gettime(0x6, &(0x7f0000000100)) 18:26:58 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x6, 0x0) 18:26:58 executing program 1: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 4: clock_gettime(0x6, 0x0) 18:26:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 1: add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 1: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: clock_gettime(0x6, 0x0) 18:26:58 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:58 executing program 1: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 4: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 18:26:58 executing program 1: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:26:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 3: clock_gettime(0x0, &(0x7f0000000100)) 18:26:58 executing program 1: add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 18:26:58 executing program 4: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 3: clock_gettime(0x6, 0x0) 18:26:58 executing program 3: clock_gettime(0x6, 0x0) 18:26:58 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:58 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:26:58 executing program 4: add_key(&(0x7f0000000080)='trusted\x00', 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:26:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:26:58 executing program 3: clock_gettime(0x6, 0x0) 18:26:58 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x240000, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:59 executing program 4: add_key(0x0, 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:59 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x40, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x401, 0x3]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002080)={0x20, 0x0, r8}, 0x20) write$FUSE_OPEN(r4, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r8, {0x0, 0x1}}, 0x20) 18:26:59 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x40, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x401, 0x3]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002080)={0x20, 0x0, r8}, 0x20) write$FUSE_OPEN(r4, &(0x7f0000000040)={0x20, 0xffffffffffffffda, r8, {0x0, 0x1}}, 0x20) 18:26:59 executing program 0: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:59 executing program 4: add_key(0x0, 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:59 executing program 0: r0 = getpid() getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') waitid(0x0, r0, 0x0, 0x1, 0x0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 4: add_key(0x0, 0x0, &(0x7f0000000100)="d9506c3021030846139ac12faadfa70ecd0ac040f2f1f90de4b8c6b0578b608bdad30ad9203926b24362e2f6bdc4381e5a94b3ae8a0d1186464116b53e40", 0x3e, 0xfffffffffffffffb) 18:26:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xfd73609199463a28, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000084e4eea7c50d9faafe6b94d3d7277800", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250d0000000500290001000000060028000400000008002b000800000005002a0001000000050037000000000008003b002a090000"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4000010) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) getsockname$netrom(r2, &(0x7f0000000040)={{0x3, @null}, [@remote, @bcast, @null, @netrom, @netrom, @netrom, @rose, @default]}, &(0x7f00000000c0)=0x48) write$vga_arbiter(r0, 0x0, 0x0) 18:26:59 executing program 0: r0 = getpid() getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') waitid(0x0, r0, 0x0, 0x1, 0x0) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) 18:26:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8001, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x8001, &(0x7f0000000080)=0x4) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 4: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:26:59 executing program 0: r0 = getpid() getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r2) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') waitid(0x0, r0, 0x0, 0x1, 0x0) 18:26:59 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, 0x0, 0x0, r0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8001, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x8001, &(0x7f0000000080)=0x4) 18:26:59 executing program 0: getpid() getpid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r1) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r1) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, 0x0, 0x0, r0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 3: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x42800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000000c0)=0x93) 18:26:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8001, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x8001, &(0x7f0000000080)=0x4) 18:26:59 executing program 0: getpid() getpid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r1) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', 0x0, 0x0, 0x0, r0) 18:26:59 executing program 3 (fault-call:0 fault-nth:0): add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:26:59 executing program 0: getpid() getpid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r1) 18:26:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8001, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:26:59 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 0: getpid() getpid() syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000bc2e115eec703b83c105303c939fe7d886e74f7de041f057f735080b909bf0f90f1201db3b50ab45c645259db7312242f2ec200d4db0f7a48228c6fb7bf87c7e24e65c86b9f67163493bf8581e4b9948f1bc7b48014b3cee3ef4cec299c5d9f2e4a3bf8ddf619c6e41a3f46e3410a208f184f752012c1cc1c527e8f796b348d6cc163b199f7b58d0032e372bb8c93484aae18c6f22f4d2721b6f0443d8a12a15aa303ba2dccceb22598b67ecc66c6ccaa020b0d79c7ec7a8e01c1a135f5cc97ea1c8e0ee92ab9363edfce8efc381e4f69e7f85fcacc36eec40594133e9fd916b881fc0b128130d36174e30ccd54fb94402000000c9fac742b7c3091275520cf46c1b656a098dfa00f72e90531f037232804e06bb3a2526eedc1fc8e7fa2189152f54", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, r1) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0x9) 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) keyctl$clear(0x7, 0x0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:59 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:26:59 executing program 0: getpid() syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000140)={0x0, "90aabe48b838a9f861bd3bdcb9254412ea5fa286d504bebd8018117bf1e64cf2debf934697c329aa99b21fa7716bdd93e5d5759b946cff456cd35c9206953b86", 0x16}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key(&(0x7f00000001c0)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffebe, r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x501000, 0x0) 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) keyctl$clear(0x7, 0x0) 18:26:59 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:26:59 executing program 4: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) keyctl$clear(0x7, 0x0) 18:26:59 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') 18:26:59 executing program 2: r0 = getpid() waitid(0x1, r0, 0x0, 0x8, 0x0) keyctl$clear(0x7, 0x0) 18:26:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:26:59 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) 18:26:59 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:26:59 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 18:26:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 3: add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:00 executing program 4: getpid() r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 3: add_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2b0800, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000000c0)=0x401) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x7, 0x4) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x5, 0x6, 0x6, 0x3}) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 3: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) 18:27:00 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 3: add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7fffffff, 0x1) 18:27:00 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 3: ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x80000000, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x4000, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ocfs2_control\x00', 0x101000, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000005c0)=0x3, &(0x7f0000000600)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000400)={0x6824, 0x0, 0x10001}) getsockname(r1, &(0x7f0000000340)=@nfc_llcp, &(0x7f00000003c0)=0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0800800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYRES64=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) 18:27:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$unlink(0x9, r1, r0) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:00 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, 0x0) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) getpgrp(0xffffffffffffffff) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, 0x0) 18:27:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x400, 0xffffffffffff8000, 0x100000001, 0xff, 0x101, 0x9b2e, 0x100}, &(0x7f0000000040)={0x3, 0x7a, 0xdbb6, 0x1ff, 0x40, 0x200, 0xfffffffffffff000, 0xc}, &(0x7f0000000140)={0xfffffffffffffff9, 0x10000000000004, 0x100, 0x0, 0x2, 0x40001, 0x1000, 0x8001}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x16, 0x9, 0xfffffbe1, 0xff, 0x200, 0x1, 0x6, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0x1b, 0x7fff, 0xff, 0x9, 0x20, r2, 0x2, [], r3, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x40) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_IE={0x1e, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x46}, 0x1, 0x0, @broadcast, 0x1, 0x81, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1f}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) 18:27:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, 0x0) 18:27:00 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:00 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:00 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x1ff}) 18:27:01 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) getresgid(&(0x7f0000002200), &(0x7f0000002240), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000007c0), 0xc, &(0x7f0000000240)={0x0}}, 0x41) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@bridge_delneigh={0x40, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1e, 0x0, 0x0, r3, 0x2, 0x22, 0x2}, [@NDA_IFINDEX={0x8}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, @NDA_PROBES={0x8, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0xc000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x204000, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000001000000000070000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4a}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x32}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1ff}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 18:27:01 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)) 18:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r3) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r3) request_key(&(0x7f0000002440)='user\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f0000000300)='@8!#\x00>D\xac\xb7\xa7\xa1[~\x9f_G\xc9\xfaK\b\xf9f\xd1I&0Z\xf6\x17\x91\xfe\xe2iP@v0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000240)) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000140)={[{0x80000000, 0xf2, 0xff, 0x20, 0x7, 0x1f, 0x2, 0x5, 0x20, 0x20, 0x0, 0x4, 0x401}, {0x0, 0x6, 0x3f, 0x7, 0x3, 0x5, 0x81, 0x0, 0x26, 0xc8, 0xca, 0x7}, {0x8000, 0x1, 0x5, 0x1, 0x5, 0x1f, 0x4, 0x7, 0x4, 0x3, 0xe1, 0xff, 0x2}], 0xffff7fff}) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r8, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f00000001c0)) 18:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x810) 18:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:01 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x810) 18:27:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002100)={0x90, 0xfffffffffffffffe, r0, {0x1, 0x1, 0xfffffffeffffffff, 0x3, 0x1ff, 0x4, {0x2, 0x7f, 0x2, 0x100000000, 0x28, 0x6, 0x0, 0x6, 0x1, 0xc000, 0x40, 0xee00, 0xee01, 0x9, 0x8}}}, 0x90) 18:27:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:01 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) 18:27:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000040)={0x0, 0xffffffb3, 0x3, &(0x7f0000000000)=0x10000}) clock_getres(0x2, &(0x7f00000000c0)) 18:27:01 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, r1) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0x9) 18:27:01 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:01 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) 18:27:01 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x5, 0x7ff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8001, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:27:01 executing program 3: accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@remote, @bcast, @null, @netrom, @remote, @default, @null]}, &(0x7f0000000040)=0x22, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f00000000c0)={0xd407, 0x8, 0xfc, 0x4, 0x2}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:01 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, r1) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0x9) 18:27:01 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x14d702, 0x0) 18:27:01 executing program 2 (fault-call:0 fault-nth:0): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:01 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200, 0x0) 18:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:27:02 executing program 3: add_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x8000}) 18:27:02 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, r1) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0x9) [ 568.237944] FAULT_INJECTION: forcing a failure. [ 568.237944] name failslab, interval 1, probability 0, space 0, times 0 18:27:02 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) [ 568.319901] CPU: 1 PID: 7264 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 568.327734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.337124] Call Trace: [ 568.339722] dump_stack+0x1b2/0x283 [ 568.343364] should_fail.cold+0x10a/0x154 [ 568.347535] should_failslab+0xd6/0x130 [ 568.351522] kmem_cache_alloc+0x28e/0x3c0 [ 568.355692] getname_flags+0xc8/0x550 [ 568.359534] do_sys_open+0x1ce/0x410 [ 568.363264] ? filp_open+0x60/0x60 [ 568.366819] ? __do_page_fault+0x159/0xad0 [ 568.371062] ? do_syscall_64+0x4c/0x640 [ 568.375039] ? SyS_open+0x30/0x30 [ 568.378531] do_syscall_64+0x1d5/0x640 [ 568.382438] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.387634] RIP: 0033:0x45deb9 [ 568.390828] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.398540] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 568.405841] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 568.413147] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:02 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000bc2e115eec703b83c105303c939fe7d886e74f7de041f057f735080b909bf0f90f1201db3b50ab45c645259db7312242f2ec200d4db0f7a48228c6fb7bf87c7e24e65c86b9f67163493bf8581e4b9948f1bc7b48014b3cee3ef4cec299c5d9f2e4a3bf8ddf619c6e41a3f46e3410a208f184f752012c1cc1c527e8f796b348d6cc163b199f7b58d0032e372bb8c93484aae18c6f22f4d2721b6f0443d8a12a15aa303ba2dccceb22598b67ecc66c6ccaa020b0d79c7ec7a8e01c1a135f5cc97ea1c8e0ee92ab9363edfce8efc381e4f69e7f85fcacc36eec40594133e9fd916b881fc0b128130d36174e30ccd54fb94402000000c9fac742b7c3091275520cf46c1b656a098dfa00f72e90531f037232804e06bb3a2526eedc1fc8e7fa2189152f54", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, r1) 18:27:02 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) [ 568.420422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.427691] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:02 executing program 2 (fault-call:0 fault-nth:1): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:02 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 568.532201] FAULT_INJECTION: forcing a failure. [ 568.532201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.544040] CPU: 1 PID: 7300 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 568.551838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.561198] Call Trace: [ 568.563792] dump_stack+0x1b2/0x283 [ 568.567426] should_fail.cold+0x10a/0x154 [ 568.571586] __alloc_pages_nodemask+0x22c/0x2720 [ 568.576357] ? __lock_acquire+0x5fc/0x3f20 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) r6 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r6) 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) keyctl$get_persistent(0x16, 0x0, 0x0) [ 568.581501] ? get_pid_task+0x91/0x130 [ 568.585399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 568.590281] ? lock_downgrade+0x740/0x740 [ 568.594439] ? trace_hardirqs_on+0x10/0x10 [ 568.598712] ? get_pid_task+0xb8/0x130 [ 568.602607] ? proc_fail_nth_write+0x7b/0x180 [ 568.607106] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 568.612055] cache_grow_begin+0x8f/0x420 [ 568.616135] cache_alloc_refill+0x273/0x350 [ 568.620465] kmem_cache_alloc+0x333/0x3c0 [ 568.624617] getname_flags+0xc8/0x550 [ 568.628426] do_sys_open+0x1ce/0x410 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) keyctl$get_persistent(0x16, 0x0, 0x0) [ 568.632147] ? filp_open+0x60/0x60 [ 568.635690] ? __do_page_fault+0x159/0xad0 [ 568.639925] ? do_syscall_64+0x4c/0x640 [ 568.643906] ? SyS_open+0x30/0x30 [ 568.647368] do_syscall_64+0x1d5/0x640 [ 568.651267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.656456] RIP: 0033:0x45deb9 [ 568.659640] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.667369] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 568.674771] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c 18:27:02 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001f0000e172777a00ff222d7b83b4ba7fffffc46bfeadafc4288c2ae5"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x9, r0, 0x8, &(0x7f0000000100)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x7, 0x10000, 0xc9}, 0x10, 0xffffffffffffffff, r1}, 0x78) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 18:27:02 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:02 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:02 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000000c0)={0x0, "23703b47ff82f17fc7e133b13b39903927e6190d625abb7d003f9cbae6629007566dae02f9bdb360e45eb1366f98970f2ff85d5af45651693b78477be8cf85b5", 0x27}, 0x48, r1) [ 568.682169] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 568.689424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.696698] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:02 executing program 3: add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6_udp(0xa, 0x2, 0x0) 18:27:02 executing program 2 (fault-call:0 fault-nth:2): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:02 executing program 5: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20022}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c014) keyctl$get_persistent(0x16, 0x0, 0x0) 18:27:02 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) [ 568.826507] FAULT_INJECTION: forcing a failure. [ 568.826507] name failslab, interval 1, probability 0, space 0, times 0 [ 568.865207] CPU: 1 PID: 7330 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 568.873039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.882395] Call Trace: [ 568.884990] dump_stack+0x1b2/0x283 [ 568.888632] should_fail.cold+0x10a/0x154 [ 568.892800] should_failslab+0xd6/0x130 [ 568.896813] kmem_cache_alloc+0x28e/0x3c0 [ 568.901157] get_empty_filp+0x86/0x3e0 [ 568.905054] path_openat+0x84/0x2970 [ 568.908784] ? get_pid_task+0x91/0x130 [ 568.912687] ? path_lookupat+0x780/0x780 [ 568.916764] ? trace_hardirqs_on+0x10/0x10 [ 568.921018] do_filp_open+0x179/0x3c0 [ 568.924828] ? may_open_dev+0xe0/0xe0 [ 568.928637] ? __alloc_fd+0x1be/0x490 [ 568.932471] ? lock_downgrade+0x740/0x740 [ 568.936634] ? do_raw_spin_unlock+0x164/0x220 [ 568.941146] ? _raw_spin_unlock+0x29/0x40 [ 568.945314] ? __alloc_fd+0x1be/0x490 [ 568.949131] do_sys_open+0x296/0x410 [ 568.952959] ? filp_open+0x60/0x60 [ 568.956508] ? __do_page_fault+0x159/0xad0 [ 568.960780] ? do_syscall_64+0x4c/0x640 [ 568.964764] ? SyS_open+0x30/0x30 [ 568.968272] do_syscall_64+0x1d5/0x640 [ 568.972194] entry_SYSCALL_64_after_hwframe+0x46/0xbb 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r5) 18:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x810) 18:27:02 executing program 5 (fault-call:0 fault-nth:0): add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 568.977384] RIP: 0033:0x45deb9 [ 568.980570] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.988282] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 568.995559] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 569.002857] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.010131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.017416] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:02 executing program 4 (fault-call:0 fault-nth:0): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:02 executing program 5: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0xc00, 0x0) 18:27:02 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r3) [ 569.104631] FAULT_INJECTION: forcing a failure. [ 569.104631] name failslab, interval 1, probability 0, space 0, times 0 [ 569.138960] CPU: 1 PID: 7358 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 569.146824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.156208] Call Trace: [ 569.158801] dump_stack+0x1b2/0x283 [ 569.162443] should_fail.cold+0x10a/0x154 [ 569.166603] should_failslab+0xd6/0x130 [ 569.170615] kmem_cache_alloc+0x28e/0x3c0 [ 569.174770] getname_flags+0xc8/0x550 [ 569.178579] do_sys_open+0x1ce/0x410 [ 569.182390] ? filp_open+0x60/0x60 [ 569.185940] ? __do_page_fault+0x159/0xad0 [ 569.190182] ? do_syscall_64+0x4c/0x640 [ 569.194174] ? SyS_open+0x30/0x30 [ 569.197658] do_syscall_64+0x1d5/0x640 18:27:03 executing program 2 (fault-call:0 fault-nth:3): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:03 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000200)='-),&.}+\x00') add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x208002, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, 0x0, 0x0, r2) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r3) 18:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:03 executing program 5: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 569.201561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.206744] RIP: 0033:0x45deb9 [ 569.209917] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.217716] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 569.224976] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 569.232241] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.239513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.246769] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:03 executing program 4 (fault-call:0 fault-nth:1): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 569.307730] FAULT_INJECTION: forcing a failure. [ 569.307730] name failslab, interval 1, probability 0, space 0, times 0 [ 569.326296] FAULT_INJECTION: forcing a failure. [ 569.326296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.338125] CPU: 1 PID: 7377 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 569.345933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.355285] Call Trace: [ 569.357874] dump_stack+0x1b2/0x283 [ 569.361539] should_fail.cold+0x10a/0x154 [ 569.365696] __alloc_pages_nodemask+0x22c/0x2720 [ 569.370463] ? __lock_acquire+0x5fc/0x3f20 [ 569.374706] ? get_pid_task+0x91/0x130 [ 569.378632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 569.383926] ? lock_downgrade+0x740/0x740 [ 569.388070] ? trace_hardirqs_on+0x10/0x10 [ 569.392313] ? get_pid_task+0xb8/0x130 [ 569.396213] ? proc_fail_nth_write+0x7b/0x180 [ 569.400713] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 569.405649] cache_grow_begin+0x8f/0x420 [ 569.409715] cache_alloc_refill+0x273/0x350 [ 569.414045] kmem_cache_alloc+0x333/0x3c0 [ 569.418188] getname_flags+0xc8/0x550 [ 569.422027] do_sys_open+0x1ce/0x410 [ 569.425747] ? filp_open+0x60/0x60 [ 569.429291] ? __do_page_fault+0x159/0xad0 [ 569.433530] ? do_syscall_64+0x4c/0x640 [ 569.437589] ? SyS_open+0x30/0x30 [ 569.441039] do_syscall_64+0x1d5/0x640 [ 569.444940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.450124] RIP: 0033:0x45deb9 18:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 569.453309] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.461011] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 569.468275] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 569.475540] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.482819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.490084] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 569.515549] CPU: 0 PID: 7375 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 569.524077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.533438] Call Trace: [ 569.536032] dump_stack+0x1b2/0x283 [ 569.539663] should_fail.cold+0x10a/0x154 [ 569.543841] should_failslab+0xd6/0x130 [ 569.547822] kmem_cache_alloc_trace+0x29a/0x3d0 [ 569.552502] apparmor_file_alloc_security+0x129/0x800 [ 569.557704] security_file_alloc+0x66/0xa0 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 569.561945] ? selinux_is_enabled+0x5/0x50 [ 569.566181] get_empty_filp+0x15c/0x3e0 [ 569.570150] path_openat+0x84/0x2970 [ 569.573865] ? get_pid_task+0x91/0x130 [ 569.577783] ? path_lookupat+0x780/0x780 [ 569.581850] ? trace_hardirqs_on+0x10/0x10 [ 569.586097] do_filp_open+0x179/0x3c0 [ 569.589900] ? may_open_dev+0xe0/0xe0 [ 569.593702] ? __alloc_fd+0x1be/0x490 [ 569.597514] ? lock_downgrade+0x740/0x740 [ 569.601664] ? do_raw_spin_unlock+0x164/0x220 18:27:03 executing program 5: r0 = add_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000002c0)='.dead\x00\xdbq\xe4\x9e-\x17\x7f\xe4\x9aT\xae\xcf\xcc2\xb8\tj\xc8\xef|/f. \x7f\x95\xe4\xe1(\x18\xca\x98\x96u\xd0\x8e\xcc\x9d\xec\xeeM\x8a\xcd\xe04 %\x14q\x17\x80D\xecL\x03(Vu\x19|\xc0\xc7gU\v\xbf\xeb_\xf84\x0eXK\xdb\x9ebb\xd3#\a\xc9.\xbc\x01M1S\xbd\xdd\fVJ\x8a\xdc`Y\b\x97\xe8s ,\xe5\xf3\f\xd5\x06\xcd\x1e\x1f\xba\xedX\t\b\x06\xc4`\xca\x85\x02\xa1\x0e\xfd\x98d\x83\xf2#\xa1\xfc;\xe119T\xba$S8Og\x18\\\xee\x99\xefZ\xc9{\x89\xa2\x00XK-\xc5\xf9', r2) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 569.612790] ? _raw_spin_unlock+0x29/0x40 [ 569.616941] ? __alloc_fd+0x1be/0x490 [ 569.620842] do_sys_open+0x296/0x410 [ 569.624566] ? filp_open+0x60/0x60 [ 569.628146] ? __do_page_fault+0x159/0xad0 [ 569.632411] ? do_syscall_64+0x4c/0x640 [ 569.636384] ? SyS_open+0x30/0x30 [ 569.639836] do_syscall_64+0x1d5/0x640 [ 569.643743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.648959] RIP: 0033:0x45deb9 [ 569.652147] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 18:27:03 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000140)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x4000, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x40201, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) [ 569.659858] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 569.667129] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 569.674400] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.681691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 569.688973] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:03 executing program 2 (fault-call:0 fault-nth:4): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:03 executing program 4 (fault-call:0 fault-nth:2): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 569.789680] FAULT_INJECTION: forcing a failure. [ 569.789680] name failslab, interval 1, probability 0, space 0, times 0 [ 569.801780] FAULT_INJECTION: forcing a failure. [ 569.801780] name failslab, interval 1, probability 0, space 0, times 0 [ 569.821818] CPU: 1 PID: 7409 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 569.829631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.838986] Call Trace: [ 569.841582] dump_stack+0x1b2/0x283 [ 569.845223] should_fail.cold+0x10a/0x154 [ 569.849382] should_failslab+0xd6/0x130 [ 569.853361] kmem_cache_alloc+0x28e/0x3c0 [ 569.857516] get_empty_filp+0x86/0x3e0 [ 569.861417] path_openat+0x84/0x2970 [ 569.865138] ? get_pid_task+0x91/0x130 [ 569.869033] ? path_lookupat+0x780/0x780 [ 569.873098] ? trace_hardirqs_on+0x10/0x10 [ 569.877348] do_filp_open+0x179/0x3c0 [ 569.881151] ? may_open_dev+0xe0/0xe0 [ 569.884954] ? __alloc_fd+0x1be/0x490 18:27:03 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) 18:27:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) keyctl$get_persistent(0x16, 0xee00, 0xfffffffffffffffa) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/uts\x00') [ 569.888762] ? lock_downgrade+0x740/0x740 [ 569.892914] ? do_raw_spin_unlock+0x164/0x220 [ 569.897415] ? _raw_spin_unlock+0x29/0x40 [ 569.901560] ? __alloc_fd+0x1be/0x490 [ 569.905371] do_sys_open+0x296/0x410 [ 569.909096] ? filp_open+0x60/0x60 [ 569.912662] ? __do_page_fault+0x159/0xad0 [ 569.916908] ? do_syscall_64+0x4c/0x640 [ 569.920894] ? SyS_open+0x30/0x30 [ 569.924357] do_syscall_64+0x1d5/0x640 [ 569.928268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.933458] RIP: 0033:0x45deb9 18:27:03 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@t={0x0, 0x5, 0x9, 0x6, @generic=0xff2c7ac5}, @e={0xff, 0xa, 0xa, 0x2, @SEQ_NOTEON=@special, 0x2, 0x5, 0x3}, @e={0xff, 0x1, 0xd, 0x1, @generic=0x1, 0x5, 0x7, 0x3}, @echo=0x7, @e={0xff, 0xb, 0x2, 0x81, @generic=0x70, 0x7, 0xfb, 0x3}, @echo=0x2, @x={0x94, 0x7, "e5beadc8fc85"}], 0x30) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:03 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 569.936642] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.944353] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 569.951627] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 569.958898] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 569.966169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.973440] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:03 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='}!+}(%^@!@\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "b89f3b043ea06e676a4f94f0d672ecdee35a65245e75a8bd0b2f7e672332428d494ab90c0fc80a048dc27132ecd6ae910a82b2eb7a96b737206749aa44aa9628", 0x3e}, 0x48, r1) keyctl$negate(0xd, r0, 0x80, r2) [ 570.001768] CPU: 1 PID: 7412 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 570.009592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.018954] Call Trace: [ 570.021550] dump_stack+0x1b2/0x283 [ 570.025185] should_fail.cold+0x10a/0x154 [ 570.029345] should_failslab+0xd6/0x130 [ 570.033330] kmem_cache_alloc_trace+0x29a/0x3d0 [ 570.038006] snd_seq_oss_open+0x50/0x950 [ 570.042073] odev_open+0x62/0x80 [ 570.045440] ? odev_release+0x70/0x70 18:27:03 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 570.049245] soundcore_open+0x3ee/0x5a0 [ 570.053233] ? sound_devnode+0xe0/0xe0 [ 570.057127] chrdev_open+0x23c/0x6d0 [ 570.060850] ? __register_chrdev+0x3d0/0x3d0 [ 570.065268] do_dentry_open+0x44b/0xec0 [ 570.069242] ? __register_chrdev+0x3d0/0x3d0 [ 570.073690] ? __inode_permission+0xcd/0x2f0 [ 570.078135] vfs_open+0x105/0x220 [ 570.081603] path_openat+0x628/0x2970 [ 570.085410] ? path_lookupat+0x780/0x780 [ 570.089477] ? trace_hardirqs_on+0x10/0x10 [ 570.093725] do_filp_open+0x179/0x3c0 [ 570.097530] ? may_open_dev+0xe0/0xe0 18:27:03 executing program 5: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0xe2, 0x4) accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @null, @null, @rose, @null, @null, @bcast]}, &(0x7f0000000100)=0x48, 0x80000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x4, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}, @call={0x85, 0x0, 0x0, 0x31}], &(0x7f0000000180)='syzkaller\x00', 0xcd05, 0x0, 0x0, 0x40f00, 0x14, [], 0x0, 0xb, r0, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x6, 0xec, 0x7fffffff}, 0x10, 0xffffffffffffffff}, 0x78) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x400, 0x4) [ 570.101344] ? lock_downgrade+0x740/0x740 [ 570.105499] ? do_raw_spin_unlock+0x164/0x220 [ 570.109997] ? _raw_spin_unlock+0x29/0x40 [ 570.114145] ? __alloc_fd+0x1be/0x490 [ 570.117958] do_sys_open+0x296/0x410 [ 570.121680] ? filp_open+0x60/0x60 [ 570.125240] ? __do_page_fault+0x159/0xad0 [ 570.129478] ? do_syscall_64+0x4c/0x640 [ 570.133454] ? SyS_open+0x30/0x30 [ 570.136914] do_syscall_64+0x1d5/0x640 [ 570.140841] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 570.146042] RIP: 0033:0x45deb9 [ 570.149231] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.157060] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 570.164336] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 570.171641] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 570.178916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 570.186201] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:04 executing program 2 (fault-call:0 fault-nth:5): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:04 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', 0x0, &(0x7f00000000c0)={0x0, "832df6538cc1a94a1e04084e0a9c35139b48d3e8caabe498fb1d63ebffa2ee3c5859ab5f5c1eb7268921a44df67e87976779f12065da276a35f17cc8a328b964", 0x19}, 0x48, 0xfffffffffffffffe) 18:27:04 executing program 4 (fault-call:0 fault-nth:3): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:04 executing program 5: add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x10000, 0x0, 0x8, 0xffff0000, 0x0, [{0x3f, 0x0, 0x9, [], 0x81}, {0x7f, 0x21, 0x2, [], 0x4e}, {0x2, 0x7f, 0xf6, [], 0x4}, {0x0, 0x9, 0x0, [], 0x4}, {0x8, 0x1, 0x6, [], 0x1}, {0x0, 0x1a, 0x9, [], 0x8}, {0x3, 0x51, 0xff, [], 0x8}, {0x0, 0x81, 0x2, [], 0x5}, {0x80, 0x9, 0x3, [], 0x1}, {0x40, 0x6, 0x4, [], 0x2}, {0x5, 0xed, 0x9, [], 0xff}, {0xca, 0x4, 0x3f, [], 0xbd}, {0xf7, 0x1, 0xc7, [], 0x40}, {0x3, 0x3, 0x8, [], 0x7}, {0x1, 0x80, 0xff, [], 0x3f}, {0x3, 0x1, 0x0, [], 0x5}, {0x1d, 0x4e, 0x1b, [], 0x7}, {0x4, 0x4, 0x3, [], 0x3}, {0x7, 0x81, 0x5, [], 0x8}, {0x5, 0xff, 0x31, [], 0x81}, {0x9, 0x30, 0xae}, {0xc0, 0x6, 0x4, [], 0x4}, {0x5, 0x3f, 0x3, [], 0x3b}, {0x4, 0x5, 0x6, [], 0x5}]}}) 18:27:04 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @auto=[0x31, 0x37, 0x31, 0x38, 0x36, 0x37, 0x65, 0x35, 0x63, 0x37, 0x30, 0x64, 0x38, 0x39, 0x65, 0x39]}, &(0x7f00000001c0)={0x0, "063112ae60e08041f969c845b792cf0b2774a12e5983d7ecaab99551812bd826068411f15d840a496a0d99d64a4ef1af08396d809ff0a586a454eefe93090275", 0x1a}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r3) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x2c, 0x33, 0x32, 0x32, 0x66, 0x38, 0x66, 0x0, 0x31, 0x33, 0x66, 0x66, 0x63, 0x66, 0x34]}, &(0x7f00000002c0)={0x0, "a5ecd73b0006d0e1e5edccd84bbd1799264c89fe723337845fa524a8b8041ee6aad21289561968635a18d7812a581d4fcab5b8899fd0d86bb0aaa9971e55e015", 0x39}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000003c0)={0x0, "b57548430634c4a5a604916357bddffbb8efc9b8b176771191f6fd58992c505d4e2bff93772c54172434c5c58bcf27c0dea0c33f318c212f524ec67ec22e20d7", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000004c0)={0x0, "4bf22eff0205c701db8723811bdf75be6ae6ddb03d1c29c6e6ee1e7d14f9857e6dda752e02bebac57ba443e97babf6754cb321b8f2bccc3090d256e4bbc577d4", 0x2d}, 0x48, r3) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x8c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3307de8527"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c1074f7274b3ecb78f6f2885ba"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "35b12bc9ae47e9e0cb31e5554d90"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e57ea8307d"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc4}, 0x1) request_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='@:!#\x00', r5) add_key(&(0x7f0000000540)='cifs.idmap\x00', 0x0, 0x0, 0x0, r4) 18:27:04 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$unlink(0x9, r0, r1) 18:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 570.282580] FAULT_INJECTION: forcing a failure. [ 570.282580] name failslab, interval 1, probability 0, space 0, times 0 [ 570.304282] FAULT_INJECTION: forcing a failure. [ 570.304282] name failslab, interval 1, probability 0, space 0, times 0 18:27:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) [ 570.377344] CPU: 1 PID: 7463 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 570.385175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.394535] Call Trace: [ 570.397131] dump_stack+0x1b2/0x283 [ 570.400771] should_fail.cold+0x10a/0x154 [ 570.404938] should_failslab+0xd6/0x130 [ 570.408964] kmem_cache_alloc_trace+0x29a/0x3d0 [ 570.413656] apparmor_file_alloc_security+0x129/0x800 [ 570.418890] security_file_alloc+0x66/0xa0 [ 570.423135] ? selinux_is_enabled+0x5/0x50 [ 570.427380] get_empty_filp+0x15c/0x3e0 [ 570.431446] path_openat+0x84/0x2970 [ 570.435168] ? get_pid_task+0x91/0x130 [ 570.439066] ? path_lookupat+0x780/0x780 [ 570.443136] ? trace_hardirqs_on+0x10/0x10 [ 570.447419] do_filp_open+0x179/0x3c0 [ 570.451228] ? may_open_dev+0xe0/0xe0 [ 570.455035] ? __alloc_fd+0x1be/0x490 [ 570.458848] ? lock_downgrade+0x740/0x740 [ 570.463000] ? do_raw_spin_unlock+0x164/0x220 [ 570.467532] ? _raw_spin_unlock+0x29/0x40 [ 570.471683] ? __alloc_fd+0x1be/0x490 [ 570.475497] do_sys_open+0x296/0x410 [ 570.479223] ? filp_open+0x60/0x60 [ 570.482771] ? __do_page_fault+0x159/0xad0 [ 570.487001] ? do_syscall_64+0x4c/0x640 [ 570.490969] ? SyS_open+0x30/0x30 [ 570.494415] do_syscall_64+0x1d5/0x640 [ 570.498303] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 570.503488] RIP: 0033:0x45deb9 [ 570.506670] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.514377] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 570.521670] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 570.528954] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 570.536220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 570.543505] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 570.550789] CPU: 0 PID: 7465 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 570.558595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.567987] Call Trace: [ 570.570587] dump_stack+0x1b2/0x283 [ 570.574226] should_fail.cold+0x10a/0x154 18:27:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 570.578382] should_failslab+0xd6/0x130 [ 570.585960] kmem_cache_alloc_trace+0x29a/0x3d0 [ 570.590650] snd_seq_create_port+0xa7/0x840 [ 570.594984] ? sprintf+0xa7/0xd0 [ 570.598358] ? snprintf+0xd0/0xd0 [ 570.601820] snd_seq_ioctl_create_port+0xe4/0x670 [ 570.606674] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 570.611542] create_port+0x16b/0x210 [ 570.615259] ? alloc_seq_queue+0x150/0x150 [ 570.619499] ? lock_acquire+0x170/0x3f0 [ 570.623483] ? snd_seq_oss_process_event+0x2640/0x2640 [ 570.628762] ? create_port+0x210/0x210 [ 570.632650] ? odev_open+0x58/0x80 [ 570.636207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 570.641226] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 570.646075] snd_seq_oss_open+0x315/0x950 [ 570.650231] odev_open+0x62/0x80 [ 570.653603] ? odev_release+0x70/0x70 [ 570.657409] soundcore_open+0x3ee/0x5a0 [ 570.661393] ? sound_devnode+0xe0/0xe0 [ 570.665310] chrdev_open+0x23c/0x6d0 [ 570.669032] ? __register_chrdev+0x3d0/0x3d0 [ 570.673453] do_dentry_open+0x44b/0xec0 [ 570.677434] ? __register_chrdev+0x3d0/0x3d0 [ 570.681876] ? __inode_permission+0xcd/0x2f0 [ 570.686290] vfs_open+0x105/0x220 [ 570.689775] path_openat+0x628/0x2970 [ 570.693589] ? path_lookupat+0x780/0x780 [ 570.697656] ? trace_hardirqs_on+0x10/0x10 [ 570.701928] do_filp_open+0x179/0x3c0 [ 570.705730] ? may_open_dev+0xe0/0xe0 [ 570.709539] ? lock_downgrade+0x740/0x740 [ 570.713705] ? do_raw_spin_unlock+0x164/0x220 [ 570.718210] ? _raw_spin_unlock+0x29/0x40 [ 570.722361] ? __alloc_fd+0x1be/0x490 [ 570.726172] do_sys_open+0x296/0x410 [ 570.729914] ? filp_open+0x60/0x60 [ 570.733461] ? __do_page_fault+0x159/0xad0 [ 570.737695] ? do_syscall_64+0x4c/0x640 [ 570.741661] ? SyS_open+0x30/0x30 [ 570.745111] do_syscall_64+0x1d5/0x640 [ 570.748997] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 570.754181] RIP: 0033:0x45deb9 [ 570.757357] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.765058] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 18:27:04 executing program 2 (fault-call:0 fault-nth:6): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:04 executing program 3: r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/251, 0xfb}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000080)=""/55, 0x37}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/104, 0x68}], 0x9, &(0x7f00000006c0)=""/236, 0xec}, 0x1043) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/nullb0\x00', 0x4240, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000a80)={0x0, 0x0, r3}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000a40)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800)='/dev/fuse\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x10) r5 = geteuid() write$FUSE_BMAP(r3, &(0x7f0000000ac0)={0x18, 0x0, 0x0, {0x400}}, 0x18) r6 = eventfd(0x8) read$eventfd(r6, &(0x7f0000000940), 0x8) write$FUSE_ATTR(r4, &(0x7f0000000840)={0x78, 0x0, 0x0, {0x6, 0x3, 0x0, {0x1, 0x7, 0x2, 0x28b7, 0x1f, 0x8, 0x20, 0x81, 0x8, 0x8000, 0x3, r5, 0xee00, 0x80000001, 0x3e90000}}}, 0x78) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000980)='/dev/nullb0\x00', 0x40000, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000009c0)) 18:27:04 executing program 5: add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:04 executing program 4 (fault-call:0 fault-nth:4): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 570.773089] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 570.780352] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 570.787599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 570.794865] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 570.802875] ALSA: seq_oss: can't create port 18:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x47, 0xc5, "b685d9057add188da380f77dbbf7342fd18a5cf90c96ad00c202a624314d25006c42d304e4e0b0b18afcf05e454439f2b65084f59524d1c601023511b581b76db66e98"}, @NL80211_ATTR_VENDOR_DATA={0x64, 0xc5, "e24b4c81c1f241d1512f27acb58a9b82b1b2700c7985a72121c387fd71e46cae574158a47507315f2251a88a5ce8e8508874352e4c359603672bd98173a27c0a26bb79a64d357deddaddbb9227abac6f2f5e4cb3095633ed3155d425bc24f26c"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x36bdee28}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x100}, 0x1, 0x0, 0x0, 0x100}, 0x0) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, r0) [ 570.843042] FAULT_INJECTION: forcing a failure. [ 570.843042] name failslab, interval 1, probability 0, space 0, times 0 18:27:04 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:04 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x74}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008010) [ 570.912603] CPU: 1 PID: 7507 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 570.920791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.930288] Call Trace: [ 570.932880] dump_stack+0x1b2/0x283 [ 570.936515] should_fail.cold+0x10a/0x154 [ 570.940668] should_failslab+0xd6/0x130 [ 570.944674] kmem_cache_alloc_trace+0x29a/0x3d0 [ 570.949355] snd_seq_queue_alloc+0x51/0x490 [ 570.953693] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 570.958627] ? alloc_seq_queue+0x150/0x150 18:27:04 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="bf5b48c0a87a27ed81fd04427c1d274f8691971c17a66586d17c295ead860ee369a8fa77dc98d46106b307b0db4d440eb54e95cdd5265bdb0ad865c56aceb69df2476785df965cb391d572a9eef1b7f5d2c75b6179718f40a2782d28492b3e14f9524db9ef9caa6b18947ea36e98d319b32bb6c6a1a1ade096e0a142375d0eeba3f0326706dd89a1f08d40960201a9f16a4d6beffc42f1f50a1adc8b72e645d78d8b9673528ed7f52289fb612071e9e82e567e0d1531454527a0d7802cc7cf454dea3d17", 0xc4, r0) r2 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='trusted\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r2) [ 570.962870] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 570.967729] alloc_seq_queue+0xd0/0x150 [ 570.971712] ? async_call_lookup_ports+0x10/0x10 [ 570.976484] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 570.981508] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 570.986378] snd_seq_oss_open+0x32d/0x950 [ 570.990530] odev_open+0x62/0x80 [ 570.993913] ? odev_release+0x70/0x70 [ 570.997732] soundcore_open+0x3ee/0x5a0 [ 571.001705] ? sound_devnode+0xe0/0xe0 [ 571.005591] chrdev_open+0x23c/0x6d0 18:27:04 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, r0) [ 571.009307] ? __register_chrdev+0x3d0/0x3d0 [ 571.013727] do_dentry_open+0x44b/0xec0 [ 571.017706] ? __register_chrdev+0x3d0/0x3d0 [ 571.022150] ? __inode_permission+0xcd/0x2f0 [ 571.026567] vfs_open+0x105/0x220 [ 571.030029] path_openat+0x628/0x2970 [ 571.033839] ? path_lookupat+0x780/0x780 [ 571.037925] ? trace_hardirqs_on+0x10/0x10 [ 571.042187] do_filp_open+0x179/0x3c0 [ 571.045986] ? may_open_dev+0xe0/0xe0 [ 571.049794] ? lock_downgrade+0x740/0x740 [ 571.053974] ? do_raw_spin_unlock+0x164/0x220 [ 571.058480] ? _raw_spin_unlock+0x29/0x40 [ 571.062628] ? __alloc_fd+0x1be/0x490 [ 571.066463] do_sys_open+0x296/0x410 [ 571.070192] ? filp_open+0x60/0x60 [ 571.073828] ? __do_page_fault+0x159/0xad0 [ 571.078066] ? do_syscall_64+0x4c/0x640 [ 571.082048] ? SyS_open+0x30/0x30 [ 571.085506] do_syscall_64+0x1d5/0x640 [ 571.089401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.094597] RIP: 0033:0x45deb9 [ 571.097782] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.105493] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 571.112786] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 571.120066] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 571.127345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 571.134650] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 571.185389] FAULT_INJECTION: forcing a failure. [ 571.185389] name failslab, interval 1, probability 0, space 0, times 0 [ 571.211698] CPU: 0 PID: 7511 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 571.219963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.229318] Call Trace: [ 571.231913] dump_stack+0x1b2/0x283 [ 571.235544] should_fail.cold+0x10a/0x154 [ 571.239692] should_failslab+0xd6/0x130 [ 571.243696] kmem_cache_alloc_trace+0x29a/0x3d0 [ 571.248372] snd_seq_oss_open+0x50/0x950 [ 571.252440] odev_open+0x62/0x80 [ 571.255805] ? odev_release+0x70/0x70 [ 571.259612] soundcore_open+0x3ee/0x5a0 [ 571.263591] ? sound_devnode+0xe0/0xe0 [ 571.268259] chrdev_open+0x23c/0x6d0 [ 571.271978] ? __register_chrdev+0x3d0/0x3d0 [ 571.276395] do_dentry_open+0x44b/0xec0 [ 571.280370] ? __register_chrdev+0x3d0/0x3d0 [ 571.284785] ? __inode_permission+0xcd/0x2f0 [ 571.289197] vfs_open+0x105/0x220 [ 571.292661] path_openat+0x628/0x2970 [ 571.296504] ? path_lookupat+0x780/0x780 [ 571.300580] ? trace_hardirqs_on+0x10/0x10 [ 571.304829] do_filp_open+0x179/0x3c0 [ 571.308640] ? may_open_dev+0xe0/0xe0 [ 571.312478] ? lock_downgrade+0x740/0x740 [ 571.316643] ? do_raw_spin_unlock+0x164/0x220 [ 571.321142] ? _raw_spin_unlock+0x29/0x40 [ 571.325291] ? __alloc_fd+0x1be/0x490 [ 571.329111] do_sys_open+0x296/0x410 18:27:05 executing program 2 (fault-call:0 fault-nth:7): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:05 executing program 3: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20c000, 0x0) 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 571.332827] ? filp_open+0x60/0x60 [ 571.336373] ? __do_page_fault+0x159/0xad0 [ 571.340611] ? do_syscall_64+0x4c/0x640 [ 571.344625] ? SyS_open+0x30/0x30 [ 571.348158] do_syscall_64+0x1d5/0x640 [ 571.353002] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.358208] RIP: 0033:0x45deb9 [ 571.361452] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.369158] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 571.376422] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 571.383685] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 571.390938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 571.398196] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 571.409839] FAULT_INJECTION: forcing a failure. [ 571.409839] name failslab, interval 1, probability 0, space 0, times 0 [ 571.421597] CPU: 0 PID: 7549 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 571.429403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.438779] Call Trace: [ 571.441370] dump_stack+0x1b2/0x283 [ 571.445023] should_fail.cold+0x10a/0x154 [ 571.449183] should_failslab+0xd6/0x130 [ 571.453169] kmem_cache_alloc_trace+0x29a/0x3d0 [ 571.457846] snd_seq_prioq_new+0x3c/0x110 [ 571.461995] snd_seq_queue_alloc+0x118/0x490 [ 571.466437] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 571.471370] ? alloc_seq_queue+0x150/0x150 [ 571.475609] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 571.480632] alloc_seq_queue+0xd0/0x150 18:27:05 executing program 4 (fault-call:0 fault-nth:5): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:05 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, 0x0, &(0x7f0000000000)='rxrpc_s\x00') keyctl$negate(0xd, 0x0, 0x2, 0xffffffffffffffff) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:05 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:05 executing program 3: ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000040)=0x5) clock_getres(0x7, &(0x7f00000000c0)) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) [ 571.484642] ? async_call_lookup_ports+0x10/0x10 [ 571.489413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 571.494431] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 571.499283] snd_seq_oss_open+0x32d/0x950 [ 571.503434] odev_open+0x62/0x80 [ 571.506798] ? odev_release+0x70/0x70 [ 571.510601] soundcore_open+0x3ee/0x5a0 [ 571.514584] ? sound_devnode+0xe0/0xe0 [ 571.518475] chrdev_open+0x23c/0x6d0 [ 571.522214] ? __register_chrdev+0x3d0/0x3d0 [ 571.527248] do_dentry_open+0x44b/0xec0 [ 571.531231] ? __register_chrdev+0x3d0/0x3d0 18:27:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x6, 0x4, 0xcd, 0x1}) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) [ 571.535663] ? __inode_permission+0xcd/0x2f0 [ 571.540070] vfs_open+0x105/0x220 [ 571.543636] path_openat+0x628/0x2970 [ 571.547446] ? path_lookupat+0x780/0x780 [ 571.551515] ? trace_hardirqs_on+0x10/0x10 [ 571.555774] do_filp_open+0x179/0x3c0 [ 571.559574] ? may_open_dev+0xe0/0xe0 [ 571.563409] ? lock_downgrade+0x740/0x740 [ 571.567568] ? do_raw_spin_unlock+0x164/0x220 [ 571.572067] ? _raw_spin_unlock+0x29/0x40 [ 571.576219] ? __alloc_fd+0x1be/0x490 [ 571.580027] do_sys_open+0x296/0x410 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 571.584700] ? filp_open+0x60/0x60 [ 571.588264] ? __do_page_fault+0x159/0xad0 [ 571.592505] ? do_syscall_64+0x4c/0x640 [ 571.596489] ? SyS_open+0x30/0x30 [ 571.599947] do_syscall_64+0x1d5/0x640 [ 571.603866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.609059] RIP: 0033:0x45deb9 [ 571.612249] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.620493] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 571.627854] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c 18:27:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000006400000429bd7000fcdb07b551678b7241374874d5e33c660263df2500000000", @ANYRES32=0x0, @ANYBLOB="0a00f3ff0c0000000a0002000600050009030000060005003702000008000b000300000008000b0001040000"], 0x44}, 0x1, 0x0, 0x0, 0x40008c1}, 0x20004000) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 571.635139] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 571.642413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 571.649858] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:05 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4c810) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf257000000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x20004040) [ 571.682772] FAULT_INJECTION: forcing a failure. [ 571.682772] name failslab, interval 1, probability 0, space 0, times 0 [ 571.694219] CPU: 0 PID: 7564 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 571.702027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.711383] Call Trace: [ 571.713978] dump_stack+0x1b2/0x283 [ 571.717614] should_fail.cold+0x10a/0x154 [ 571.721801] should_failslab+0xd6/0x130 [ 571.725785] kmem_cache_alloc_trace+0x29a/0x3d0 [ 571.730471] snd_seq_create_port+0xa7/0x840 [ 571.734804] ? sprintf+0xa7/0xd0 [ 571.738177] ? snprintf+0xd0/0xd0 [ 571.741637] snd_seq_ioctl_create_port+0xe4/0x670 [ 571.746483] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 571.751336] create_port+0x16b/0x210 [ 571.755150] ? alloc_seq_queue+0x150/0x150 [ 571.759388] ? lock_downgrade+0x740/0x740 [ 571.763546] ? snd_seq_oss_process_event+0x2640/0x2640 [ 571.768825] ? create_port+0x210/0x210 [ 571.772713] ? _raw_spin_unlock+0x29/0x40 [ 571.776872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 571.781893] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 571.786744] snd_seq_oss_open+0x315/0x950 [ 571.790897] odev_open+0x62/0x80 [ 571.794265] ? odev_release+0x70/0x70 [ 571.798076] soundcore_open+0x3ee/0x5a0 [ 571.802063] ? sound_devnode+0xe0/0xe0 [ 571.805952] chrdev_open+0x23c/0x6d0 [ 571.809668] ? __register_chrdev+0x3d0/0x3d0 [ 571.814087] do_dentry_open+0x44b/0xec0 [ 571.818076] ? __register_chrdev+0x3d0/0x3d0 [ 571.822496] ? __inode_permission+0xcd/0x2f0 [ 571.826914] vfs_open+0x105/0x220 [ 571.830373] path_openat+0x628/0x2970 [ 571.834186] ? path_lookupat+0x780/0x780 [ 571.838251] ? trace_hardirqs_on+0x10/0x10 [ 571.842493] do_filp_open+0x179/0x3c0 [ 571.846298] ? may_open_dev+0xe0/0xe0 [ 571.850118] ? lock_downgrade+0x740/0x740 [ 571.854280] ? do_raw_spin_unlock+0x164/0x220 [ 571.858788] ? _raw_spin_unlock+0x29/0x40 [ 571.862940] ? __alloc_fd+0x1be/0x490 [ 571.866756] do_sys_open+0x296/0x410 [ 571.870484] ? filp_open+0x60/0x60 [ 571.874132] ? __do_page_fault+0x159/0xad0 [ 571.878376] ? do_syscall_64+0x4c/0x640 [ 571.882364] ? SyS_open+0x30/0x30 [ 571.885825] do_syscall_64+0x1d5/0x640 [ 571.889722] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.894935] RIP: 0033:0x45deb9 [ 571.898128] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.905838] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 571.913119] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 571.920406] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 18:27:05 executing program 2 (fault-call:0 fault-nth:8): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:05 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) [ 571.927683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 571.934961] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:05 executing program 4 (fault-call:0 fault-nth:6): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:05 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000180)=0x3) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000ffdbdf251900000008000300", @ANYRES32=0x0, @ANYBLOB="05001e00640000800509a300000000004336"], 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x4084) 18:27:05 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:05 executing program 3: ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x3bf}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x400, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0xe8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xc, 0x8, 0x96fd, 0x82e, 0x40, r0, 0x28, [], r1, r2, 0x1, 0x3, 0x3}, 0x40) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 571.976011] ALSA: seq_oss: can't create port 18:27:05 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 572.019406] FAULT_INJECTION: forcing a failure. [ 572.019406] name failslab, interval 1, probability 0, space 0, times 0 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xec, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:05 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0xf9c, 0x60, 0x78, 0x1, 0x7fffffff, 0xf, 0x1, {0xf0000000, 0x0, 0x1}, {0x401, 0x5}, {0x20, 0x8061}, {0x5, 0x9, 0x1}, 0x3, 0x10, 0x8, 0x40, 0x1, 0xfff, 0x3ff, 0x2, 0x29, 0x2, 0x3ff, 0x3f, 0x0, 0x200, 0x1}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x42, 0xfffffffffffffffb) [ 572.069234] CPU: 0 PID: 7603 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 572.077093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.086476] Call Trace: [ 572.089093] dump_stack+0x1b2/0x283 [ 572.092734] should_fail.cold+0x10a/0x154 [ 572.096927] should_failslab+0xd6/0x130 [ 572.100914] kmem_cache_alloc_trace+0x29a/0x3d0 [ 572.105596] snd_seq_prioq_new+0x3c/0x110 [ 572.109765] snd_seq_queue_alloc+0x142/0x490 [ 572.114187] snd_seq_ioctl_create_queue+0xa5/0x2f0 18:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xf4, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 572.119121] ? alloc_seq_queue+0x150/0x150 [ 572.123394] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 572.128245] alloc_seq_queue+0xd0/0x150 [ 572.132226] ? async_call_lookup_ports+0x10/0x10 [ 572.136998] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 572.142022] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 572.146871] snd_seq_oss_open+0x32d/0x950 [ 572.151033] odev_open+0x62/0x80 [ 572.154402] ? odev_release+0x70/0x70 [ 572.158210] soundcore_open+0x3ee/0x5a0 [ 572.162192] ? sound_devnode+0xe0/0xe0 [ 572.166085] chrdev_open+0x23c/0x6d0 18:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x810) [ 572.169805] ? __register_chrdev+0x3d0/0x3d0 [ 572.174221] do_dentry_open+0x44b/0xec0 [ 572.178200] ? __register_chrdev+0x3d0/0x3d0 [ 572.182637] ? __inode_permission+0xcd/0x2f0 [ 572.187059] vfs_open+0x105/0x220 [ 572.190513] path_openat+0x628/0x2970 [ 572.194325] ? path_lookupat+0x780/0x780 [ 572.198390] ? trace_hardirqs_on+0x10/0x10 [ 572.202637] do_filp_open+0x179/0x3c0 [ 572.206448] ? may_open_dev+0xe0/0xe0 [ 572.210262] ? lock_downgrade+0x740/0x740 [ 572.214421] ? do_raw_spin_unlock+0x164/0x220 [ 572.218928] ? _raw_spin_unlock+0x29/0x40 [ 572.223084] ? __alloc_fd+0x1be/0x490 [ 572.226895] do_sys_open+0x296/0x410 [ 572.230615] ? filp_open+0x60/0x60 [ 572.234162] ? __do_page_fault+0x159/0xad0 [ 572.238399] ? do_syscall_64+0x4c/0x640 [ 572.242553] ? SyS_open+0x30/0x30 [ 572.246012] do_syscall_64+0x1d5/0x640 [ 572.249909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.255098] RIP: 0033:0x45deb9 [ 572.258285] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.265996] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 572.273265] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 572.280539] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 572.287844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 572.295149] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:06 executing program 2 (fault-call:0 fault-nth:9): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:06 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @auto=[0x35, 0x37, 0x66, 0x65, 0x31, 0x37, 0x52, 0x31, 0x0, 0x37, 0x61, 0x61, 0x66, 0x34, 0x61, 0x62]}, &(0x7f00000000c0)={0x0, "8e2a9cd204b5558201b4829ea0ecc4bf572a040e063b950cc34223862050dd074a78c9fd83f6bed7fd9805babe4a5d4c300112230811785ca388bfe82ac94d07", 0x19}, 0x48, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000140)='id_legacy\x00', 0x0, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f00000001c0)={0x0, "0f30537971f8b406c460a25abe7f8f7bf4e979690b96aeed21d79bac755231a3f77b875e986871f4fce2db03004632ff39aecb257a8aa787e22197764feda432", 0x1d}, 0x48, r0) keyctl$unlink(0x9, r2, r1) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000240)=0x7fff) 18:27:06 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000b00), 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000b40)=0x1, 0x4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x108, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xbff6, 0x42}}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x38}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x3d}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7fff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x3c}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5f}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x317}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x65}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffe000, 0x2c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x54}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004890}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000425aa203e198b6c42ba04a765b691c45bfd0eb81963ed0f0e6b3a9067a0d2f2699c278860ea334b1de60eb6e254b1b7441ca8c49136ff4d02aa4e4ddc6dfaabe24cccd86158ca7fcf3da84a27359e8bd7807e85f14a8be3bb9500c567a8c69a60ce51958f4f7584699d5e53b3cda0e7d98ea8892910eb8e056ad179d7ef1fc26922600", @ANYRES16=r3, @ANYBLOB="0100000000000000000070000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r3, @ANYBLOB="040027bd7000fcdbdf252d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099004aec00001a00000062004500fd8b6b99de9fc63255c5ad990caa72f9722baba08ed220443f9223a034afd4e4e554929a368b317c86bedaafb9ff80134aa3744a84f2183b52e69dea75517a74ddae678c728227d823246c6b656f6f6cd46f7431901e00002b00450030a4397fbe272b83eaf96e95f8a7693b000a68afbda250e65ba573f9e4f151374707d5946e5daec10a38468a000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5a48a12a", @ANYRES16=r0, @ANYBLOB="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"], 0x9a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004) [ 572.324279] FAULT_INJECTION: forcing a failure. [ 572.324279] name failslab, interval 1, probability 0, space 0, times 0 [ 572.364444] CPU: 1 PID: 7610 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 572.372282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.381655] Call Trace: [ 572.384250] dump_stack+0x1b2/0x283 [ 572.387899] should_fail.cold+0x10a/0x154 [ 572.392062] should_failslab+0xd6/0x130 [ 572.396049] kmem_cache_alloc_trace+0x29a/0x3d0 [ 572.400726] snd_seq_queue_alloc+0x51/0x490 [ 572.405060] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 572.410019] ? alloc_seq_queue+0x150/0x150 [ 572.414276] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 572.419126] alloc_seq_queue+0xd0/0x150 [ 572.423108] ? async_call_lookup_ports+0x10/0x10 [ 572.427880] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 572.432903] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 572.437756] snd_seq_oss_open+0x32d/0x950 [ 572.441908] odev_open+0x62/0x80 [ 572.445269] ? odev_release+0x70/0x70 [ 572.449052] soundcore_open+0x3ee/0x5a0 [ 572.453025] ? sound_devnode+0xe0/0xe0 [ 572.456908] chrdev_open+0x23c/0x6d0 [ 572.460612] ? __register_chrdev+0x3d0/0x3d0 [ 572.465009] do_dentry_open+0x44b/0xec0 [ 572.468970] ? __register_chrdev+0x3d0/0x3d0 [ 572.473364] ? __inode_permission+0xcd/0x2f0 [ 572.477765] vfs_open+0x105/0x220 [ 572.481355] path_openat+0x628/0x2970 [ 572.485154] ? path_lookupat+0x780/0x780 [ 572.489229] ? trace_hardirqs_on+0x10/0x10 [ 572.493458] do_filp_open+0x179/0x3c0 [ 572.497274] ? may_open_dev+0xe0/0xe0 [ 572.501065] ? lock_downgrade+0x740/0x740 [ 572.506184] ? do_raw_spin_unlock+0x164/0x220 [ 572.510664] ? _raw_spin_unlock+0x29/0x40 [ 572.514794] ? __alloc_fd+0x1be/0x490 [ 572.518579] do_sys_open+0x296/0x410 [ 572.522295] ? filp_open+0x60/0x60 [ 572.525818] ? __do_page_fault+0x159/0xad0 [ 572.530046] ? do_syscall_64+0x4c/0x640 [ 572.534020] ? SyS_open+0x30/0x30 [ 572.537471] do_syscall_64+0x1d5/0x640 [ 572.541346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.546533] RIP: 0033:0x45deb9 [ 572.549701] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.557393] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 572.564647] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 572.571897] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 572.579159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 572.586415] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 572.595859] FAULT_INJECTION: forcing a failure. [ 572.595859] name failslab, interval 1, probability 0, space 0, times 0 [ 572.619402] CPU: 1 PID: 7641 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 572.627227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.636585] Call Trace: [ 572.639183] dump_stack+0x1b2/0x283 [ 572.642825] should_fail.cold+0x10a/0x154 [ 572.646981] should_failslab+0xd6/0x130 [ 572.650964] kmem_cache_alloc_trace+0x29a/0x3d0 [ 572.655640] snd_seq_timer_new+0x41/0x1b0 [ 572.659793] snd_seq_queue_alloc+0x167/0x490 [ 572.664208] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 572.669144] ? alloc_seq_queue+0x150/0x150 [ 572.673381] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 572.678240] alloc_seq_queue+0xd0/0x150 [ 572.682217] ? async_call_lookup_ports+0x10/0x10 [ 572.686987] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 572.692012] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 572.696864] snd_seq_oss_open+0x32d/0x950 [ 572.701015] odev_open+0x62/0x80 [ 572.704377] ? odev_release+0x70/0x70 [ 572.708208] soundcore_open+0x3ee/0x5a0 [ 572.712190] ? sound_devnode+0xe0/0xe0 [ 572.716077] chrdev_open+0x23c/0x6d0 [ 572.719799] ? __register_chrdev+0x3d0/0x3d0 [ 572.724216] do_dentry_open+0x44b/0xec0 [ 572.728194] ? __register_chrdev+0x3d0/0x3d0 [ 572.732616] ? __inode_permission+0xcd/0x2f0 [ 572.737121] vfs_open+0x105/0x220 [ 572.740617] path_openat+0x628/0x2970 [ 572.744425] ? path_lookupat+0x780/0x780 [ 572.748500] ? trace_hardirqs_on+0x10/0x10 [ 572.752746] do_filp_open+0x179/0x3c0 [ 572.756544] ? may_open_dev+0xe0/0xe0 [ 572.760351] ? lock_downgrade+0x740/0x740 [ 572.764526] ? do_raw_spin_unlock+0x164/0x220 [ 572.769025] ? _raw_spin_unlock+0x29/0x40 [ 572.773175] ? __alloc_fd+0x1be/0x490 [ 572.776984] do_sys_open+0x296/0x410 [ 572.780697] ? filp_open+0x60/0x60 [ 572.784266] ? __do_page_fault+0x159/0xad0 [ 572.788510] ? do_syscall_64+0x4c/0x640 [ 572.792490] ? SyS_open+0x30/0x30 [ 572.796816] do_syscall_64+0x1d5/0x640 [ 572.800737] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.805930] RIP: 0033:0x45deb9 [ 572.809113] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.816864] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 18:27:06 executing program 4 (fault-call:0 fault-nth:7): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x810) 18:27:06 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:06 executing program 3: add_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24000004) 18:27:06 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:06 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x363084, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f00000000c0)) getpeername$netrom(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1}) 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:06 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x2c, 0x26, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xfff1, 0x9}, {0x18, 0xfff3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7fcae2e41ec55573}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x28, r0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x40, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 572.824135] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 572.831436] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 572.838705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 572.846932] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 572.856388] FAULT_INJECTION: forcing a failure. [ 572.856388] name failslab, interval 1, probability 0, space 0, times 0 [ 572.867772] CPU: 1 PID: 7653 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 572.875577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.885892] Call Trace: [ 572.888483] dump_stack+0x1b2/0x283 [ 572.892113] should_fail.cold+0x10a/0x154 [ 572.896299] should_failslab+0xd6/0x130 [ 572.900280] kmem_cache_alloc_trace+0x29a/0x3d0 [ 572.904963] snd_seq_prioq_new+0x3c/0x110 [ 572.909113] snd_seq_queue_alloc+0x118/0x490 [ 572.914494] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 572.919425] ? alloc_seq_queue+0x150/0x150 [ 572.923694] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 572.928542] alloc_seq_queue+0xd0/0x150 [ 572.932519] ? async_call_lookup_ports+0x10/0x10 [ 572.937294] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 572.942323] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 572.947184] snd_seq_oss_open+0x32d/0x950 [ 572.951339] odev_open+0x62/0x80 [ 572.954708] ? odev_release+0x70/0x70 [ 572.958518] soundcore_open+0x3ee/0x5a0 [ 572.962523] ? sound_devnode+0xe0/0xe0 [ 572.966418] chrdev_open+0x23c/0x6d0 [ 572.970178] ? __register_chrdev+0x3d0/0x3d0 [ 572.974626] do_dentry_open+0x44b/0xec0 [ 572.978603] ? __register_chrdev+0x3d0/0x3d0 [ 572.983030] ? __inode_permission+0xcd/0x2f0 [ 572.987457] vfs_open+0x105/0x220 [ 572.990912] path_openat+0x628/0x2970 [ 572.994718] ? path_lookupat+0x780/0x780 [ 572.998781] ? trace_hardirqs_on+0x10/0x10 [ 573.003020] do_filp_open+0x179/0x3c0 [ 573.006830] ? may_open_dev+0xe0/0xe0 [ 573.010644] ? lock_downgrade+0x740/0x740 [ 573.014806] ? do_raw_spin_unlock+0x164/0x220 [ 573.019422] ? _raw_spin_unlock+0x29/0x40 18:27:06 executing program 2 (fault-call:0 fault-nth:10): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 573.023599] ? __alloc_fd+0x1be/0x490 [ 573.030369] do_sys_open+0x296/0x410 [ 573.034095] ? filp_open+0x60/0x60 [ 573.037679] ? __do_page_fault+0x159/0xad0 [ 573.041923] ? do_syscall_64+0x4c/0x640 [ 573.045964] ? SyS_open+0x30/0x30 [ 573.049430] do_syscall_64+0x1d5/0x640 [ 573.053328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.058504] RIP: 0033:0x45deb9 [ 573.061771] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.069499] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 573.076766] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 573.084028] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 573.091288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 573.098584] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 573.108851] FAULT_INJECTION: forcing a failure. [ 573.108851] name failslab, interval 1, probability 0, space 0, times 0 18:27:06 executing program 4 (fault-call:0 fault-nth:8): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:06 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) keyctl$negate(0xd, r0, 0x8, r2) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000040)=0x4) 18:27:06 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffe) 18:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x0) 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 573.120353] CPU: 1 PID: 7686 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 573.128159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.137547] Call Trace: [ 573.140169] dump_stack+0x1b2/0x283 [ 573.143821] should_fail.cold+0x10a/0x154 [ 573.147967] should_failslab+0xd6/0x130 [ 573.151941] kmem_cache_alloc_trace+0x29a/0x3d0 [ 573.156626] snd_timer_instance_new+0x4a/0x3c0 [ 573.161222] snd_timer_open+0x848/0x15b0 [ 573.165290] ? snprintf+0xd0/0xd0 [ 573.168757] ? snd_timer_close_locked+0xbc0/0xbc0 [ 573.173614] snd_seq_timer_open+0x1e8/0x4d0 18:27:06 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:07 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 573.177944] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 573.182617] ? queue_use+0x19a/0x1d0 [ 573.186339] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 573.191481] queue_use+0x8b/0x1d0 [ 573.194939] snd_seq_queue_alloc+0x2af/0x490 [ 573.199354] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 573.204282] ? alloc_seq_queue+0x150/0x150 [ 573.208516] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 573.213365] alloc_seq_queue+0xd0/0x150 [ 573.217347] ? async_call_lookup_ports+0x10/0x10 [ 573.222124] ? rcu_read_lock_sched_held+0x16c/0x1d0 18:27:07 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 573.227500] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.232363] snd_seq_oss_open+0x32d/0x950 [ 573.236522] odev_open+0x62/0x80 [ 573.240073] ? odev_release+0x70/0x70 [ 573.243881] soundcore_open+0x3ee/0x5a0 [ 573.247893] ? sound_devnode+0xe0/0xe0 [ 573.251787] chrdev_open+0x23c/0x6d0 [ 573.255506] ? __register_chrdev+0x3d0/0x3d0 [ 573.259929] do_dentry_open+0x44b/0xec0 [ 573.263908] ? __register_chrdev+0x3d0/0x3d0 [ 573.268319] ? __inode_permission+0xcd/0x2f0 [ 573.272736] vfs_open+0x105/0x220 18:27:07 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 573.276488] path_openat+0x628/0x2970 [ 573.280295] ? path_lookupat+0x780/0x780 [ 573.284391] ? trace_hardirqs_on+0x10/0x10 [ 573.288639] do_filp_open+0x179/0x3c0 [ 573.292470] ? may_open_dev+0xe0/0xe0 [ 573.296280] ? lock_downgrade+0x740/0x740 [ 573.300436] ? do_raw_spin_unlock+0x164/0x220 [ 573.304938] ? _raw_spin_unlock+0x29/0x40 [ 573.309092] ? __alloc_fd+0x1be/0x490 [ 573.312909] do_sys_open+0x296/0x410 [ 573.316720] ? filp_open+0x60/0x60 [ 573.320268] ? __do_page_fault+0x159/0xad0 [ 573.324507] ? do_syscall_64+0x4c/0x640 18:27:07 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) [ 573.328497] ? SyS_open+0x30/0x30 [ 573.332143] do_syscall_64+0x1d5/0x640 [ 573.336080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.341272] RIP: 0033:0x45deb9 [ 573.344457] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.352170] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 573.359469] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 573.366833] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 18:27:07 executing program 2 (fault-call:0 fault-nth:11): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:07 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xffffff65, &(0x7f0000000040)={&(0x7f0000000280)=@newlinkprop={0x44, 0x6c, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50010}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9ce}, @IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @gretap={{0x0, 0x1, 'gretap\x00'}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x0, 0x4, 0x80}]}}}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_ALT_IFNAME={0x0, 0x35, 'bridge0\x00'}, @IFLA_BROADCAST={0x0, 0x2, @random="db88ac9c7ca7"}, @IFLA_TXQLEN={0x0, 0xd, 0x4}, @IFLA_TXQLEN, @IFLA_PHYS_PORT_ID={0x0, 0x22, "9c86eee7e42d"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) [ 573.374109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 573.381387] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 573.391321] FAULT_INJECTION: forcing a failure. [ 573.391321] name failslab, interval 1, probability 0, space 0, times 0 [ 573.411157] CPU: 1 PID: 7697 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 573.418982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.428338] Call Trace: [ 573.430933] dump_stack+0x1b2/0x283 [ 573.434570] should_fail.cold+0x10a/0x154 [ 573.438726] should_failslab+0xd6/0x130 [ 573.442708] kmem_cache_alloc_trace+0x29a/0x3d0 [ 573.447476] snd_seq_prioq_new+0x3c/0x110 [ 573.451652] snd_seq_queue_alloc+0x142/0x490 [ 573.456068] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 573.460999] ? alloc_seq_queue+0x150/0x150 [ 573.465243] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 573.470086] alloc_seq_queue+0xd0/0x150 [ 573.474062] ? async_call_lookup_ports+0x10/0x10 [ 573.478835] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.483855] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.488703] snd_seq_oss_open+0x32d/0x950 [ 573.492859] odev_open+0x62/0x80 [ 573.496840] ? odev_release+0x70/0x70 [ 573.500651] soundcore_open+0x3ee/0x5a0 [ 573.504623] ? sound_devnode+0xe0/0xe0 [ 573.508510] chrdev_open+0x23c/0x6d0 [ 573.512209] ? __register_chrdev+0x3d0/0x3d0 [ 573.516864] do_dentry_open+0x44b/0xec0 [ 573.520846] ? __register_chrdev+0x3d0/0x3d0 [ 573.525320] ? __inode_permission+0xcd/0x2f0 [ 573.529737] vfs_open+0x105/0x220 [ 573.533180] path_openat+0x628/0x2970 [ 573.536968] ? path_lookupat+0x780/0x780 [ 573.541017] ? trace_hardirqs_on+0x10/0x10 [ 573.545280] do_filp_open+0x179/0x3c0 [ 573.549180] ? may_open_dev+0xe0/0xe0 [ 573.552972] ? lock_downgrade+0x740/0x740 [ 573.557143] ? do_raw_spin_unlock+0x164/0x220 [ 573.561627] ? _raw_spin_unlock+0x29/0x40 [ 573.565794] ? __alloc_fd+0x1be/0x490 [ 573.569593] do_sys_open+0x296/0x410 [ 573.573427] ? filp_open+0x60/0x60 [ 573.576960] ? __do_page_fault+0x159/0xad0 [ 573.581192] ? do_syscall_64+0x4c/0x640 [ 573.585171] ? SyS_open+0x30/0x30 [ 573.588611] do_syscall_64+0x1d5/0x640 [ 573.592491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.597681] RIP: 0033:0x45deb9 [ 573.600856] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.609513] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 573.616782] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 573.624044] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 573.632287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 573.639563] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 573.648859] FAULT_INJECTION: forcing a failure. [ 573.648859] name failslab, interval 1, probability 0, space 0, times 0 [ 573.660187] CPU: 1 PID: 7718 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 573.668013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.677391] Call Trace: 18:27:07 executing program 4 (fault-call:0 fault-nth:9): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 573.680009] dump_stack+0x1b2/0x283 [ 573.683646] should_fail.cold+0x10a/0x154 [ 573.687822] should_failslab+0xd6/0x130 [ 573.691823] __kmalloc_track_caller+0x2bc/0x400 [ 573.696498] ? snd_timer_instance_new+0x6d/0x3c0 [ 573.701259] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.706273] kstrdup+0x36/0x70 [ 573.709451] snd_timer_instance_new+0x6d/0x3c0 [ 573.714032] snd_timer_open+0x848/0x15b0 [ 573.718098] ? snprintf+0xd0/0xd0 [ 573.721537] ? snd_timer_close_locked+0xbc0/0xbc0 [ 573.726369] snd_seq_timer_open+0x1e8/0x4d0 [ 573.730692] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 573.735345] ? queue_use+0x19a/0x1d0 [ 573.739071] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 573.744161] queue_use+0x8b/0x1d0 [ 573.747599] snd_seq_queue_alloc+0x2af/0x490 [ 573.751992] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 573.756930] ? alloc_seq_queue+0x150/0x150 [ 573.761161] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 573.766003] alloc_seq_queue+0xd0/0x150 [ 573.769973] ? async_call_lookup_ports+0x10/0x10 [ 573.774740] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.779761] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.784598] snd_seq_oss_open+0x32d/0x950 [ 573.788729] odev_open+0x62/0x80 [ 573.792088] ? odev_release+0x70/0x70 [ 573.795869] soundcore_open+0x3ee/0x5a0 [ 573.799831] ? sound_devnode+0xe0/0xe0 [ 573.803700] chrdev_open+0x23c/0x6d0 [ 573.807405] ? __register_chrdev+0x3d0/0x3d0 [ 573.811812] do_dentry_open+0x44b/0xec0 [ 573.819508] ? __register_chrdev+0x3d0/0x3d0 [ 573.823903] ? __inode_permission+0xcd/0x2f0 [ 573.828294] vfs_open+0x105/0x220 [ 573.831755] path_openat+0x628/0x2970 [ 573.835556] ? path_lookupat+0x780/0x780 [ 573.839622] ? trace_hardirqs_on+0x10/0x10 [ 573.843840] do_filp_open+0x179/0x3c0 [ 573.847633] ? may_open_dev+0xe0/0xe0 [ 573.851444] ? lock_downgrade+0x740/0x740 [ 573.855590] ? do_raw_spin_unlock+0x164/0x220 [ 573.860093] ? _raw_spin_unlock+0x29/0x40 [ 573.864223] ? __alloc_fd+0x1be/0x490 [ 573.868026] do_sys_open+0x296/0x410 [ 573.871740] ? filp_open+0x60/0x60 [ 573.875303] ? __do_page_fault+0x159/0xad0 [ 573.879522] ? do_syscall_64+0x4c/0x640 [ 573.883559] ? SyS_open+0x30/0x30 [ 573.887958] do_syscall_64+0x1d5/0x640 [ 573.891832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.897011] RIP: 0033:0x45deb9 [ 573.900179] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.907871] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 573.915148] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 573.922408] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 18:27:07 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x3b, r2) 18:27:07 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:07 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 18:27:07 executing program 2 (fault-call:0 fault-nth:12): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 573.929662] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 573.936926] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 573.965356] FAULT_INJECTION: forcing a failure. [ 573.965356] name failslab, interval 1, probability 0, space 0, times 0 18:27:07 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x40000000}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0x4}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x20040000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c05}, 0x0) r4 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='wlan0\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r4, 0xfffffffffffffffa) [ 574.002863] CPU: 0 PID: 7724 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 574.010697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.020080] Call Trace: [ 574.022675] dump_stack+0x1b2/0x283 [ 574.026341] should_fail.cold+0x10a/0x154 [ 574.030502] should_failslab+0xd6/0x130 [ 574.034484] kmem_cache_alloc_trace+0x29a/0x3d0 [ 574.039164] snd_seq_timer_new+0x41/0x1b0 [ 574.043432] snd_seq_queue_alloc+0x167/0x490 [ 574.047850] snd_seq_ioctl_create_queue+0xa5/0x2f0 18:27:07 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 18:27:07 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 574.052785] ? alloc_seq_queue+0x150/0x150 [ 574.057029] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 574.062145] alloc_seq_queue+0xd0/0x150 [ 574.066125] ? async_call_lookup_ports+0x10/0x10 [ 574.070983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 574.076030] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 574.080891] snd_seq_oss_open+0x32d/0x950 [ 574.085072] odev_open+0x62/0x80 [ 574.088437] ? odev_release+0x70/0x70 [ 574.092241] soundcore_open+0x3ee/0x5a0 [ 574.096227] ? sound_devnode+0xe0/0xe0 [ 574.100320] chrdev_open+0x23c/0x6d0 [ 574.104042] ? __register_chrdev+0x3d0/0x3d0 [ 574.108458] do_dentry_open+0x44b/0xec0 [ 574.112433] ? __register_chrdev+0x3d0/0x3d0 [ 574.116849] ? __inode_permission+0xcd/0x2f0 [ 574.121263] vfs_open+0x105/0x220 [ 574.124722] path_openat+0x628/0x2970 [ 574.128529] ? path_lookupat+0x780/0x780 [ 574.132598] ? trace_hardirqs_on+0x10/0x10 [ 574.136850] do_filp_open+0x179/0x3c0 [ 574.140652] ? may_open_dev+0xe0/0xe0 [ 574.144455] ? lock_downgrade+0x740/0x740 [ 574.148634] ? do_raw_spin_unlock+0x164/0x220 18:27:07 executing program 3: add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x64, 0xfffffffffffffffb) [ 574.153127] ? _raw_spin_unlock+0x29/0x40 [ 574.157278] ? __alloc_fd+0x1be/0x490 [ 574.161085] do_sys_open+0x296/0x410 [ 574.164819] ? filp_open+0x60/0x60 [ 574.168365] ? __do_page_fault+0x159/0xad0 [ 574.172601] ? do_syscall_64+0x4c/0x640 [ 574.176618] ? SyS_open+0x30/0x30 [ 574.180084] do_syscall_64+0x1d5/0x640 [ 574.183983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 574.189178] RIP: 0033:0x45deb9 [ 574.192393] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 18:27:08 executing program 3: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x9}}, 0x18) ioctl$BLKFRASET(r0, 0x1264, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) [ 574.200283] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 574.207561] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 574.214837] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 574.222136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 574.229411] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 574.245598] FAULT_INJECTION: forcing a failure. 18:27:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x145, 0x754}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xffffffff, 0x9cd, &(0x7f0000000140)="068272e4315402de55e116ec1c915db00558eb53aa1d6650752f401423db6df9a89b35e8f499fecce37bfda3994b802da3f5a542c72a0d511a357b02040ed1d2afe5d291abcd1d2cf5e8633e59177f137789b6164ca2793a2678351ce7b46a84c904afa5854d4d253c1c58c74a0f9eff7e1662bc2340614ab0301c", &(0x7f00000001c0)="2a5cbf98578063cd7ec201fe1916663c4c435392fd238b179f56255876235426ee827c23abf5ca232e450572e4dc42e9a3113c3dc79bf66cbdd130a7fba7fdb4d834dd231c9b348b24fd8f745a88c6", 0x7b, 0x4f}) 18:27:08 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r1) [ 574.245598] name failslab, interval 1, probability 0, space 0, times 0 [ 574.264293] CPU: 0 PID: 7730 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 574.272335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.281696] Call Trace: [ 574.284297] dump_stack+0x1b2/0x283 [ 574.287942] should_fail.cold+0x10a/0x154 [ 574.292099] should_failslab+0xd6/0x130 [ 574.296081] kmem_cache_alloc_trace+0x29a/0x3d0 [ 574.300763] ? snd_hrtimer_callback+0x3a0/0x3a0 [ 574.305439] snd_hrtimer_open+0x41/0x110 [ 574.309499] ? snd_hrtimer_callback+0x3a0/0x3a0 [ 574.314274] snd_timer_open+0xf25/0x15b0 [ 574.318345] ? snd_timer_close_locked+0xbc0/0xbc0 [ 574.323200] snd_seq_timer_open+0x1e8/0x4d0 [ 574.327532] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 574.332207] ? queue_use+0x19a/0x1d0 [ 574.335932] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 574.341044] queue_use+0x8b/0x1d0 [ 574.344506] snd_seq_queue_alloc+0x2af/0x490 [ 574.348925] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 574.353864] ? alloc_seq_queue+0x150/0x150 [ 574.358097] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 574.363069] alloc_seq_queue+0xd0/0x150 [ 574.367041] ? async_call_lookup_ports+0x10/0x10 [ 574.371918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 574.376951] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 574.381795] snd_seq_oss_open+0x32d/0x950 [ 574.385943] odev_open+0x62/0x80 [ 574.389322] ? odev_release+0x70/0x70 [ 574.393171] soundcore_open+0x3ee/0x5a0 [ 574.397155] ? sound_devnode+0xe0/0xe0 [ 574.401063] chrdev_open+0x23c/0x6d0 [ 574.404800] ? __register_chrdev+0x3d0/0x3d0 [ 574.409251] do_dentry_open+0x44b/0xec0 [ 574.413215] ? __register_chrdev+0x3d0/0x3d0 [ 574.417691] ? __inode_permission+0xcd/0x2f0 [ 574.422103] vfs_open+0x105/0x220 [ 574.425553] path_openat+0x628/0x2970 [ 574.429381] ? path_lookupat+0x780/0x780 [ 574.433433] ? trace_hardirqs_on+0x10/0x10 [ 574.437676] do_filp_open+0x179/0x3c0 [ 574.441466] ? may_open_dev+0xe0/0xe0 [ 574.445269] ? lock_downgrade+0x740/0x740 [ 574.449421] ? do_raw_spin_unlock+0x164/0x220 [ 574.453904] ? _raw_spin_unlock+0x29/0x40 [ 574.458052] ? __alloc_fd+0x1be/0x490 [ 574.461840] do_sys_open+0x296/0x410 [ 574.465550] ? filp_open+0x60/0x60 [ 574.469087] ? __do_page_fault+0x159/0xad0 [ 574.473324] ? do_syscall_64+0x4c/0x640 [ 574.477287] ? SyS_open+0x30/0x30 [ 574.480734] do_syscall_64+0x1d5/0x640 [ 574.484883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 574.490071] RIP: 0033:0x45deb9 [ 574.493261] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 18:27:08 executing program 4 (fault-call:0 fault-nth:10): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:08 executing program 5: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:08 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:08 executing program 3: add_key(&(0x7f0000000000)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 574.500974] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 574.508236] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 574.515497] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 574.522758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 574.530033] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:08 executing program 2 (fault-call:0 fault-nth:13): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:08 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) [ 574.611175] FAULT_INJECTION: forcing a failure. [ 574.611175] name failslab, interval 1, probability 0, space 0, times 0 [ 574.623941] CPU: 0 PID: 7775 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 574.631753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.641143] Call Trace: [ 574.644175] dump_stack+0x1b2/0x283 [ 574.647810] should_fail.cold+0x10a/0x154 [ 574.651968] should_failslab+0xd6/0x130 [ 574.655949] kmem_cache_alloc_trace+0x29a/0x3d0 18:27:08 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = getpid() write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xfffffffffffffff5, 0x0, {{0x7fff, 0x2, 0x1, r2}}}, 0x28) syz_open_procfs$namespace(r2, &(0x7f0000002140)='ns/ipc\x00') wait4(0x0, &(0x7f0000002040), 0x8, &(0x7f0000002080)) eventfd2(0x7, 0x80001) [ 574.660687] snd_seq_oss_readq_new+0x44/0x2b0 [ 574.665194] snd_seq_oss_open+0x4c3/0x950 [ 574.669398] odev_open+0x62/0x80 [ 574.672764] ? odev_release+0x70/0x70 [ 574.676564] soundcore_open+0x3ee/0x5a0 [ 574.680544] ? sound_devnode+0xe0/0xe0 [ 574.684441] chrdev_open+0x23c/0x6d0 [ 574.688207] ? __register_chrdev+0x3d0/0x3d0 [ 574.692629] do_dentry_open+0x44b/0xec0 [ 574.696627] ? __register_chrdev+0x3d0/0x3d0 [ 574.701046] ? __inode_permission+0xcd/0x2f0 [ 574.705460] vfs_open+0x105/0x220 [ 574.708919] path_openat+0x628/0x2970 [ 574.712739] ? path_lookupat+0x780/0x780 [ 574.716805] ? trace_hardirqs_on+0x10/0x10 [ 574.721051] do_filp_open+0x179/0x3c0 [ 574.724861] ? may_open_dev+0xe0/0xe0 [ 574.728675] ? lock_downgrade+0x740/0x740 [ 574.732839] ? do_raw_spin_unlock+0x164/0x220 [ 574.737345] ? _raw_spin_unlock+0x29/0x40 [ 574.741504] ? __alloc_fd+0x1be/0x490 [ 574.745329] do_sys_open+0x296/0x410 [ 574.749348] ? filp_open+0x60/0x60 [ 574.752898] ? __do_page_fault+0x159/0xad0 [ 574.757144] ? do_syscall_64+0x4c/0x640 18:27:08 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000810) [ 574.761143] ? SyS_open+0x30/0x30 [ 574.764603] do_syscall_64+0x1d5/0x640 [ 574.768513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 574.773715] RIP: 0033:0x45deb9 [ 574.776907] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.784621] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 574.791895] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 574.799208] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 18:27:08 executing program 3: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x4, 0x1}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x800, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)=0x5e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) socket$inet6_udp(0xa, 0x2, 0x0) 18:27:08 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:08 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@host}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 574.806489] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 574.813767] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 574.823179] FAULT_INJECTION: forcing a failure. [ 574.823179] name failslab, interval 1, probability 0, space 0, times 0 [ 574.866229] CPU: 0 PID: 7776 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 574.874070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.883432] Call Trace: [ 574.886027] dump_stack+0x1b2/0x283 [ 574.889666] should_fail.cold+0x10a/0x154 [ 574.893819] should_failslab+0xd6/0x130 [ 574.897800] kmem_cache_alloc_trace+0x29a/0x3d0 [ 574.902486] snd_timer_instance_new+0x4a/0x3c0 [ 574.907118] snd_timer_open+0x848/0x15b0 [ 574.911186] ? snprintf+0xd0/0xd0 [ 574.914683] ? snd_timer_close_locked+0xbc0/0xbc0 [ 574.919538] snd_seq_timer_open+0x1e8/0x4d0 [ 574.923870] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 574.928545] ? queue_use+0x19a/0x1d0 [ 574.932277] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 574.937393] queue_use+0x8b/0x1d0 [ 574.940852] snd_seq_queue_alloc+0x2af/0x490 [ 574.945268] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 574.950227] ? alloc_seq_queue+0x150/0x150 [ 574.954470] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 574.959447] alloc_seq_queue+0xd0/0x150 18:27:08 executing program 2 (fault-call:0 fault-nth:14): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 574.963465] ? async_call_lookup_ports+0x10/0x10 [ 574.968247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 574.973275] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 574.978136] snd_seq_oss_open+0x32d/0x950 [ 574.982296] odev_open+0x62/0x80 [ 574.985695] ? odev_release+0x70/0x70 [ 574.989503] soundcore_open+0x3ee/0x5a0 [ 574.993487] ? sound_devnode+0xe0/0xe0 [ 574.997378] chrdev_open+0x23c/0x6d0 [ 575.001121] ? __register_chrdev+0x3d0/0x3d0 [ 575.005541] do_dentry_open+0x44b/0xec0 [ 575.009517] ? __register_chrdev+0x3d0/0x3d0 [ 575.013932] ? __inode_permission+0xcd/0x2f0 [ 575.018345] vfs_open+0x105/0x220 [ 575.021808] path_openat+0x628/0x2970 [ 575.025619] ? path_lookupat+0x780/0x780 [ 575.029687] ? trace_hardirqs_on+0x10/0x10 [ 575.033935] do_filp_open+0x179/0x3c0 [ 575.037739] ? may_open_dev+0xe0/0xe0 [ 575.041570] ? lock_downgrade+0x740/0x740 [ 575.045727] ? do_raw_spin_unlock+0x164/0x220 [ 575.050226] ? _raw_spin_unlock+0x29/0x40 [ 575.054381] ? __alloc_fd+0x1be/0x490 [ 575.058218] do_sys_open+0x296/0x410 [ 575.061939] ? filp_open+0x60/0x60 [ 575.065476] ? __do_page_fault+0x159/0xad0 [ 575.069712] ? do_syscall_64+0x4c/0x640 [ 575.073685] ? SyS_open+0x30/0x30 [ 575.077127] do_syscall_64+0x1d5/0x640 [ 575.081003] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 575.086188] RIP: 0033:0x45deb9 [ 575.089374] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.097071] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 575.104334] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 575.111618] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 575.118888] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 575.126150] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 575.139539] FAULT_INJECTION: forcing a failure. [ 575.139539] name failslab, interval 1, probability 0, space 0, times 0 [ 575.170082] CPU: 1 PID: 7808 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 575.177995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.187369] Call Trace: [ 575.189992] dump_stack+0x1b2/0x283 [ 575.193632] should_fail.cold+0x10a/0x154 [ 575.197767] should_failslab+0xd6/0x130 [ 575.202159] __kmalloc+0x2c1/0x400 [ 575.205702] ? snd_seq_oss_readq_new+0x7f/0x2b0 [ 575.210352] snd_seq_oss_readq_new+0x7f/0x2b0 [ 575.214832] snd_seq_oss_open+0x4c3/0x950 [ 575.218980] odev_open+0x62/0x80 [ 575.222332] ? odev_release+0x70/0x70 [ 575.226122] soundcore_open+0x3ee/0x5a0 [ 575.230080] ? sound_devnode+0xe0/0xe0 [ 575.233966] chrdev_open+0x23c/0x6d0 [ 575.237674] ? __register_chrdev+0x3d0/0x3d0 [ 575.242065] do_dentry_open+0x44b/0xec0 [ 575.246019] ? __register_chrdev+0x3d0/0x3d0 [ 575.250417] ? __inode_permission+0xcd/0x2f0 [ 575.254806] vfs_open+0x105/0x220 [ 575.258239] path_openat+0x628/0x2970 [ 575.262036] ? path_lookupat+0x780/0x780 [ 575.266086] ? trace_hardirqs_on+0x10/0x10 [ 575.270310] do_filp_open+0x179/0x3c0 [ 575.274089] ? may_open_dev+0xe0/0xe0 [ 575.277900] ? lock_downgrade+0x740/0x740 [ 575.282043] ? do_raw_spin_unlock+0x164/0x220 [ 575.286519] ? _raw_spin_unlock+0x29/0x40 [ 575.290664] ? __alloc_fd+0x1be/0x490 [ 575.294448] do_sys_open+0x296/0x410 [ 575.298145] ? filp_open+0x60/0x60 [ 575.301667] ? __do_page_fault+0x159/0xad0 [ 575.305881] ? do_syscall_64+0x4c/0x640 [ 575.309834] ? SyS_open+0x30/0x30 [ 575.313266] do_syscall_64+0x1d5/0x640 18:27:09 executing program 4 (fault-call:0 fault-nth:11): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:09 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000000)={0x1ff, 0x292, 0x9, 0x3, 0x5}) 18:27:09 executing program 5: add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 575.317139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 575.322311] RIP: 0033:0x45deb9 [ 575.325480] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.333187] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 575.340454] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 575.347800] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 575.355061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 575.362324] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:09 executing program 2 (fault-call:0 fault-nth:15): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:09 executing program 3: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) keyctl$negate(0xd, 0x0, 0xf7, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) r2 = geteuid() write$FUSE_ATTR(r0, &(0x7f00000021c0)={0x78, 0x0, r1, {0x9, 0xdea, 0x0, {0x4, 0xfd, 0xe67d, 0x8, 0x4, 0x89, 0x9, 0xca7, 0xffffffff, 0xc000, 0x40, r2, 0xee01, 0x6, 0x100}}}, 0x78) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 18:27:09 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ffe000/0x2000)=nil}) [ 575.421702] FAULT_INJECTION: forcing a failure. [ 575.421702] name failslab, interval 1, probability 0, space 0, times 0 18:27:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:09 executing program 5: add_key(&(0x7f00000001c0)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000180)={0x10000, 0xa5e, &(0x7f0000000000)="2b6188fc1454c25cc3d5137bda9f0a08ade33b9d7b2d8e315c635589818a1b0290366c0bb3e9e300f9d6e9660c953f590f86ab1467349ec3315223ba3b162c03335ba7d96a8cfffe90ecb120ad4a0fd0851e89b5399539f9b5db49abdc3360ac2aacdc320afb741bfb", &(0x7f00000000c0)="2cb3cc5bc3bbcc5da0c131cb0d84bd8340f2e05ee08f5d30da83e126c9b04e4920037393ef4b9a1b149e34206fff973fc4ddab6e49b47a44e09880a454292bb2ddadd217378a46fc9f0103b764ae13fad09a49eead5d45124ca35b3f2b58e0dfdf2eb0039c709e8b5b378e8526c480d58a41ea7017f994e4793ece953c4d929f751f32", 0x69, 0x83}) [ 575.463808] CPU: 0 PID: 7821 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 575.471641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.481005] Call Trace: [ 575.483603] dump_stack+0x1b2/0x283 [ 575.487248] should_fail.cold+0x10a/0x154 [ 575.491402] should_failslab+0xd6/0x130 [ 575.495380] __kmalloc_track_caller+0x2bc/0x400 [ 575.500082] ? snd_timer_instance_new+0x6d/0x3c0 [ 575.504846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 575.509871] kstrdup+0x36/0x70 18:27:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:09 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "133359d8d735150a6b979fa041c112ffa5ba375751b99f7be718f44fb6c10ccd789bf986421b39745d18b7f0fa5084e324a22c2dcae4bd36ce34f81a852cf13e", 0x33}, 0x48, r0) r1 = geteuid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x3, 0xfffffffffffff000, 0x80000001, 0x1, 0x9, {0x3, 0x7, 0x0, 0x10001, 0x7a, 0x5, 0xffffffff, 0x5, 0x5, 0x4000, 0x7, r1, 0xee00, 0x7f}}, {0x0, 0x1}}}, 0xa0) [ 575.513073] snd_timer_instance_new+0x6d/0x3c0 [ 575.517677] snd_timer_open+0x848/0x15b0 [ 575.521763] ? snprintf+0xd0/0xd0 [ 575.526179] ? snd_timer_close_locked+0xbc0/0xbc0 [ 575.531031] snd_seq_timer_open+0x1e8/0x4d0 [ 575.535368] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 575.540050] ? queue_use+0x19a/0x1d0 [ 575.543773] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 575.548886] queue_use+0x8b/0x1d0 [ 575.552346] snd_seq_queue_alloc+0x2af/0x490 [ 575.556764] snd_seq_ioctl_create_queue+0xa5/0x2f0 18:27:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 575.562826] ? alloc_seq_queue+0x150/0x150 [ 575.567071] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 575.571932] alloc_seq_queue+0xd0/0x150 [ 575.575914] ? async_call_lookup_ports+0x10/0x10 [ 575.580693] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 575.585748] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 575.590613] snd_seq_oss_open+0x32d/0x950 [ 575.594855] odev_open+0x62/0x80 [ 575.598276] ? odev_release+0x70/0x70 [ 575.602087] soundcore_open+0x3ee/0x5a0 [ 575.606078] ? sound_devnode+0xe0/0xe0 [ 575.609968] chrdev_open+0x23c/0x6d0 [ 575.613682] ? __register_chrdev+0x3d0/0x3d0 [ 575.618103] do_dentry_open+0x44b/0xec0 [ 575.622082] ? __register_chrdev+0x3d0/0x3d0 [ 575.626501] ? __inode_permission+0xcd/0x2f0 [ 575.630917] vfs_open+0x105/0x220 [ 575.634377] path_openat+0x628/0x2970 [ 575.638221] ? path_lookupat+0x780/0x780 [ 575.642289] ? trace_hardirqs_on+0x10/0x10 [ 575.646539] do_filp_open+0x179/0x3c0 [ 575.650338] ? may_open_dev+0xe0/0xe0 [ 575.654173] ? lock_downgrade+0x740/0x740 [ 575.658329] ? do_raw_spin_unlock+0x164/0x220 [ 575.662854] ? _raw_spin_unlock+0x29/0x40 [ 575.667007] ? __alloc_fd+0x1be/0x490 [ 575.670821] do_sys_open+0x296/0x410 [ 575.674541] ? filp_open+0x60/0x60 [ 575.678087] ? __do_page_fault+0x159/0xad0 [ 575.682333] ? do_syscall_64+0x4c/0x640 [ 575.686485] ? SyS_open+0x30/0x30 [ 575.689939] do_syscall_64+0x1d5/0x640 [ 575.693835] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 575.699028] RIP: 0033:0x45deb9 [ 575.702239] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.710906] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 575.718703] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 575.726076] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 575.733380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 575.740646] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 575.749499] FAULT_INJECTION: forcing a failure. [ 575.749499] name failslab, interval 1, probability 0, space 0, times 0 18:27:09 executing program 4 (fault-call:0 fault-nth:12): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:09 executing program 5: add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:09 executing program 3: r0 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='*-.\x00', 0xfffffffffffffff8) keyctl$search(0xa, r0, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, r1) [ 575.771661] CPU: 0 PID: 7824 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 575.779507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.788869] Call Trace: [ 575.791468] dump_stack+0x1b2/0x283 [ 575.795213] should_fail.cold+0x10a/0x154 [ 575.799366] should_failslab+0xd6/0x130 [ 575.803438] kmem_cache_alloc_trace+0x29a/0x3d0 [ 575.808125] snd_seq_oss_writeq_new+0x88/0x260 [ 575.812715] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 575.818031] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 575.823487] ? __lockdep_init_map+0x100/0x560 [ 575.827995] ? __raw_spin_lock_init+0x28/0x100 [ 575.832593] snd_seq_oss_open+0x6b4/0x950 [ 575.836777] odev_open+0x62/0x80 [ 575.840141] ? odev_release+0x70/0x70 [ 575.843943] soundcore_open+0x3ee/0x5a0 [ 575.847926] ? sound_devnode+0xe0/0xe0 [ 575.851830] chrdev_open+0x23c/0x6d0 [ 575.855559] ? __register_chrdev+0x3d0/0x3d0 [ 575.859985] do_dentry_open+0x44b/0xec0 [ 575.863965] ? __register_chrdev+0x3d0/0x3d0 [ 575.868386] ? __inode_permission+0xcd/0x2f0 [ 575.872797] vfs_open+0x105/0x220 [ 575.876266] path_openat+0x628/0x2970 [ 575.880076] ? path_lookupat+0x780/0x780 [ 575.884160] ? trace_hardirqs_on+0x10/0x10 [ 575.888437] do_filp_open+0x179/0x3c0 [ 575.892263] ? may_open_dev+0xe0/0xe0 [ 575.896073] ? lock_downgrade+0x740/0x740 [ 575.900228] ? do_raw_spin_unlock+0x164/0x220 [ 575.904725] ? _raw_spin_unlock+0x29/0x40 [ 575.908883] ? __alloc_fd+0x1be/0x490 [ 575.912699] do_sys_open+0x296/0x410 [ 575.916423] ? filp_open+0x60/0x60 [ 575.919970] ? __do_page_fault+0x159/0xad0 [ 575.924210] ? do_syscall_64+0x4c/0x640 [ 575.928190] ? SyS_open+0x30/0x30 [ 575.931645] do_syscall_64+0x1d5/0x640 [ 575.935718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 575.940908] RIP: 0033:0x45deb9 [ 575.944100] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.951820] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 575.959176] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 575.966538] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 575.973806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 575.981077] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 575.995281] FAULT_INJECTION: forcing a failure. [ 575.995281] name failslab, interval 1, probability 0, space 0, times 0 [ 576.011481] CPU: 1 PID: 7854 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 576.019301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.028644] Call Trace: [ 576.031258] dump_stack+0x1b2/0x283 [ 576.034875] should_fail.cold+0x10a/0x154 [ 576.039012] should_failslab+0xd6/0x130 [ 576.042989] kmem_cache_alloc_trace+0x29a/0x3d0 [ 576.047649] ? snd_hrtimer_callback+0x3a0/0x3a0 [ 576.052324] snd_hrtimer_open+0x41/0x110 [ 576.056904] ? snd_hrtimer_callback+0x3a0/0x3a0 [ 576.063558] snd_timer_open+0xf25/0x15b0 [ 576.067636] ? snd_timer_close_locked+0xbc0/0xbc0 [ 576.072477] snd_seq_timer_open+0x1e8/0x4d0 [ 576.076805] ? snd_seq_timer_set_skew+0xe0/0xe0 [ 576.081481] ? queue_use+0x19a/0x1d0 [ 576.085309] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 576.090461] queue_use+0x8b/0x1d0 [ 576.093897] snd_seq_queue_alloc+0x2af/0x490 [ 576.099257] snd_seq_ioctl_create_queue+0xa5/0x2f0 [ 576.104166] ? alloc_seq_queue+0x150/0x150 [ 576.108390] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 576.113312] alloc_seq_queue+0xd0/0x150 [ 576.117272] ? async_call_lookup_ports+0x10/0x10 [ 576.122014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 576.127010] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 576.131830] snd_seq_oss_open+0x32d/0x950 [ 576.135977] odev_open+0x62/0x80 [ 576.139319] ? odev_release+0x70/0x70 [ 576.144066] soundcore_open+0x3ee/0x5a0 [ 576.148035] ? sound_devnode+0xe0/0xe0 [ 576.151911] chrdev_open+0x23c/0x6d0 [ 576.155605] ? __register_chrdev+0x3d0/0x3d0 [ 576.160003] do_dentry_open+0x44b/0xec0 [ 576.163970] ? __register_chrdev+0x3d0/0x3d0 [ 576.168384] ? __inode_permission+0xcd/0x2f0 [ 576.172785] vfs_open+0x105/0x220 [ 576.176232] path_openat+0x628/0x2970 [ 576.180016] ? path_lookupat+0x780/0x780 [ 576.184071] ? trace_hardirqs_on+0x10/0x10 [ 576.188289] do_filp_open+0x179/0x3c0 [ 576.192821] ? may_open_dev+0xe0/0xe0 [ 576.197510] ? lock_downgrade+0x740/0x740 [ 576.201836] ? do_raw_spin_unlock+0x164/0x220 [ 576.206852] ? _raw_spin_unlock+0x29/0x40 [ 576.210988] ? __alloc_fd+0x1be/0x490 [ 576.215845] do_sys_open+0x296/0x410 [ 576.219556] ? filp_open+0x60/0x60 [ 576.223080] ? __do_page_fault+0x159/0xad0 [ 576.227374] ? do_syscall_64+0x4c/0x640 [ 576.231363] ? SyS_open+0x30/0x30 [ 576.234804] do_syscall_64+0x1d5/0x640 [ 576.238679] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 576.243859] RIP: 0033:0x45deb9 [ 576.247028] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.254718] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 576.261975] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c 18:27:10 executing program 2 (fault-call:0 fault-nth:16): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:10 executing program 5: add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{}, [@null, @null, @rose, @netrom, @remote, @bcast, @remote, @null]}, &(0x7f00000000c0)=0x48, 0x80c00) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) recvfrom$netrom(r0, &(0x7f0000000340)=""/224, 0xe0, 0x2000, &(0x7f00000002c0)={{0x3, @bcast, 0x5}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 18:27:10 executing program 3: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000008) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r2) [ 576.269228] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 576.277445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 576.284712] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:10 executing program 4 (fault-call:0 fault-nth:13): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 576.321393] FAULT_INJECTION: forcing a failure. [ 576.321393] name failslab, interval 1, probability 0, space 0, times 0 [ 576.342189] CPU: 1 PID: 7868 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 576.350011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.359368] Call Trace: [ 576.361958] dump_stack+0x1b2/0x283 [ 576.365603] should_fail.cold+0x10a/0x154 18:27:10 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000000)={0x2, 0x0, {&(0x7f00000000c0)=""/237, 0xed, &(0x7f00000001c0)=""/4096, 0x3, 0x1}}, 0x48) 18:27:10 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80201, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 576.369759] should_failslab+0xd6/0x130 [ 576.373738] kmem_cache_alloc_trace+0x29a/0x3d0 [ 576.378409] snd_seq_oss_timer_new+0x40/0x240 [ 576.382904] snd_seq_oss_open+0x53e/0x950 [ 576.387058] odev_open+0x62/0x80 [ 576.390530] ? odev_release+0x70/0x70 [ 576.394364] soundcore_open+0x3ee/0x5a0 [ 576.398349] ? sound_devnode+0xe0/0xe0 [ 576.402237] chrdev_open+0x23c/0x6d0 [ 576.406041] ? __register_chrdev+0x3d0/0x3d0 [ 576.410475] do_dentry_open+0x44b/0xec0 [ 576.414476] ? __register_chrdev+0x3d0/0x3d0 18:27:10 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='rxrpc_s\x00', r0) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="c5accc77f316d69294a57ad4d9c3ee843999df54ff6ee4ea97471924e689b00e724de849de94a82f7ba01e044ac1f6721d0fc9332fafc43a51", 0x39, r1) [ 576.418894] ? __inode_permission+0xcd/0x2f0 [ 576.423317] vfs_open+0x105/0x220 [ 576.426863] path_openat+0x628/0x2970 [ 576.430672] ? path_lookupat+0x780/0x780 [ 576.434735] ? trace_hardirqs_on+0x10/0x10 [ 576.438984] do_filp_open+0x179/0x3c0 [ 576.442811] ? may_open_dev+0xe0/0xe0 [ 576.446650] ? lock_downgrade+0x740/0x740 [ 576.450808] ? do_raw_spin_unlock+0x164/0x220 [ 576.455322] ? _raw_spin_unlock+0x29/0x40 [ 576.459472] ? __alloc_fd+0x1be/0x490 [ 576.463371] do_sys_open+0x296/0x410 [ 576.467084] ? filp_open+0x60/0x60 18:27:10 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x6}) [ 576.470627] ? __do_page_fault+0x159/0xad0 [ 576.474952] ? do_syscall_64+0x4c/0x640 [ 576.478937] ? SyS_open+0x30/0x30 [ 576.482400] do_syscall_64+0x1d5/0x640 [ 576.486296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 576.491489] RIP: 0033:0x45deb9 [ 576.494676] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.502386] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 576.509662] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c 18:27:10 executing program 3: add_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:10 executing program 2 (fault-call:0 fault-nth:17): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 576.516937] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 576.524311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 576.531584] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 576.549099] ALSA: seq_oss: can't alloc timer [ 576.554032] FAULT_INJECTION: forcing a failure. [ 576.554032] name failslab, interval 1, probability 0, space 0, times 0 [ 576.604983] CPU: 0 PID: 7887 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 576.612848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.622210] Call Trace: [ 576.624841] dump_stack+0x1b2/0x283 [ 576.628475] should_fail.cold+0x10a/0x154 [ 576.632634] should_failslab+0xd6/0x130 [ 576.636622] kmem_cache_alloc_trace+0x29a/0x3d0 [ 576.641309] snd_seq_oss_readq_new+0x44/0x2b0 [ 576.645844] snd_seq_oss_open+0x4c3/0x950 [ 576.650001] odev_open+0x62/0x80 18:27:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f00000006c0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e6ff5f4d", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf255c0000000c009900090000006a00000008006b00f000000008006b001c02000008006b003c00000008006b003700000008006b006e00000008006b001400000008006b006e000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000850) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="768b0a9b", @ANYRES16=r1, @ANYBLOB="000129bd7010fcdbdf65670000000801c40004000000b8da202d05000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000801) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0xa08004, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000680)={0xeb4, 0x47}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x8c}}, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4d9f8e6df1d29be9f22dcfb9848706ebdcd633f6d2f37", @ANYRES16=r1, @ANYBLOB="080028bd7000fddbdf250600000008000300", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000740)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:10 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x28080, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x7, 0x4) r1 = accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@bcast, @null, @remote, @netrom, @bcast, @remote, @null, @netrom]}, &(0x7f0000000040)=0x48, 0x800) prctl$PR_SET_KEEPCAPS(0x8, 0x0) recvfrom$netrom(r1, &(0x7f0000000180)=""/36, 0x24, 0x2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) [ 576.653367] ? odev_release+0x70/0x70 [ 576.657258] soundcore_open+0x3ee/0x5a0 [ 576.661235] ? sound_devnode+0xe0/0xe0 [ 576.665124] chrdev_open+0x23c/0x6d0 [ 576.668846] ? __register_chrdev+0x3d0/0x3d0 [ 576.673261] do_dentry_open+0x44b/0xec0 [ 576.677248] ? __register_chrdev+0x3d0/0x3d0 [ 576.681685] ? __inode_permission+0xcd/0x2f0 [ 576.686115] vfs_open+0x105/0x220 [ 576.689571] path_openat+0x628/0x2970 [ 576.694339] ? path_lookupat+0x780/0x780 [ 576.698404] ? trace_hardirqs_on+0x10/0x10 [ 576.702654] do_filp_open+0x179/0x3c0 [ 576.706453] ? may_open_dev+0xe0/0xe0 [ 576.710301] ? lock_downgrade+0x740/0x740 [ 576.714477] ? do_raw_spin_unlock+0x164/0x220 [ 576.719000] ? _raw_spin_unlock+0x29/0x40 [ 576.723152] ? __alloc_fd+0x1be/0x490 [ 576.726962] do_sys_open+0x296/0x410 [ 576.730684] ? filp_open+0x60/0x60 [ 576.734233] ? __do_page_fault+0x159/0xad0 [ 576.738476] ? do_syscall_64+0x4c/0x640 [ 576.742459] ? SyS_open+0x30/0x30 [ 576.745920] do_syscall_64+0x1d5/0x640 [ 576.749854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 576.755048] RIP: 0033:0x45deb9 [ 576.758232] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.765939] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 576.773206] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 576.780477] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 576.787749] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 576.795021] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:10 executing program 4 (fault-call:0 fault-nth:14): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x18, 0xc, 0xff}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80801) [ 576.840516] FAULT_INJECTION: forcing a failure. [ 576.840516] name failslab, interval 1, probability 0, space 0, times 0 [ 576.870998] CPU: 1 PID: 7900 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 576.878858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.888212] Call Trace: [ 576.890803] dump_stack+0x1b2/0x283 [ 576.894437] should_fail.cold+0x10a/0x154 [ 576.898589] should_failslab+0xd6/0x130 [ 576.902572] kmem_cache_alloc_trace+0x29a/0x3d0 [ 576.907285] snd_seq_port_connect+0x5d/0x4d0 [ 576.911730] ? _raw_read_unlock+0x29/0x40 [ 576.915888] ? check_subscription_permission.isra.0+0x112/0x1e0 [ 576.921957] snd_seq_ioctl_subscribe_port+0x1d4/0x370 [ 576.927275] ? snd_seq_ioctl_unsubscribe_port+0x370/0x370 [ 576.932831] ? mark_held_locks+0xa6/0xf0 [ 576.936901] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 576.942015] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 576.946878] snd_seq_oss_midi_open+0x485/0x590 [ 576.951473] ? snd_seq_oss_midi_setup+0x50/0x50 [ 576.956158] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 576.961186] snd_seq_oss_midi_open_all+0x79/0xc0 [ 576.966035] snd_seq_oss_open+0x7c1/0x950 [ 576.970191] odev_open+0x62/0x80 [ 576.973691] ? odev_release+0x70/0x70 [ 576.977502] soundcore_open+0x3ee/0x5a0 [ 576.981833] ? sound_devnode+0xe0/0xe0 [ 576.985724] chrdev_open+0x23c/0x6d0 18:27:10 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) keyctl$get_persistent(0x16, 0x0, r1) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, 0x0) 18:27:10 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, 0x0) [ 576.989445] ? __register_chrdev+0x3d0/0x3d0 [ 576.993861] do_dentry_open+0x44b/0xec0 [ 576.997852] ? __register_chrdev+0x3d0/0x3d0 [ 577.002972] ? __inode_permission+0xcd/0x2f0 [ 577.007416] vfs_open+0x105/0x220 [ 577.010905] path_openat+0x628/0x2970 [ 577.014722] ? path_lookupat+0x780/0x780 [ 577.018825] ? trace_hardirqs_on+0x10/0x10 [ 577.023106] do_filp_open+0x179/0x3c0 [ 577.026915] ? may_open_dev+0xe0/0xe0 [ 577.030733] ? lock_downgrade+0x740/0x740 [ 577.034891] ? do_raw_spin_unlock+0x164/0x220 [ 577.039401] ? _raw_spin_unlock+0x29/0x40 [ 577.043559] ? __alloc_fd+0x1be/0x490 [ 577.047375] do_sys_open+0x296/0x410 [ 577.051094] ? filp_open+0x60/0x60 [ 577.054657] ? __do_page_fault+0x159/0xad0 [ 577.058955] ? do_syscall_64+0x4c/0x640 [ 577.062916] ? SyS_open+0x30/0x30 [ 577.066355] do_syscall_64+0x1d5/0x640 [ 577.070250] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.075442] RIP: 0033:0x45deb9 [ 577.078629] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.086322] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 577.093583] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 577.100841] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 577.108096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 577.115612] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 577.126014] FAULT_INJECTION: forcing a failure. [ 577.126014] name failslab, interval 1, probability 0, space 0, times 0 [ 577.148988] CPU: 0 PID: 7945 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 577.156812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.166192] Call Trace: [ 577.168775] dump_stack+0x1b2/0x283 [ 577.172400] should_fail.cold+0x10a/0x154 [ 577.176550] should_failslab+0xd6/0x130 [ 577.180511] kmem_cache_alloc_trace+0x29a/0x3d0 [ 577.185191] snd_seq_oss_writeq_new+0x88/0x260 [ 577.189757] ? snd_seq_oss_readq_info_read+0x100/0x100 [ 577.195022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 577.200464] ? __lockdep_init_map+0x100/0x560 [ 577.205062] ? __raw_spin_lock_init+0x28/0x100 [ 577.209633] snd_seq_oss_open+0x6b4/0x950 [ 577.213764] odev_open+0x62/0x80 [ 577.217110] ? odev_release+0x70/0x70 [ 577.220900] soundcore_open+0x3ee/0x5a0 [ 577.224865] ? sound_devnode+0xe0/0xe0 [ 577.228738] chrdev_open+0x23c/0x6d0 [ 577.232439] ? __register_chrdev+0x3d0/0x3d0 [ 577.236854] do_dentry_open+0x44b/0xec0 [ 577.240818] ? __register_chrdev+0x3d0/0x3d0 [ 577.245259] ? __inode_permission+0xcd/0x2f0 [ 577.249660] vfs_open+0x105/0x220 [ 577.253116] path_openat+0x628/0x2970 [ 577.256921] ? path_lookupat+0x780/0x780 [ 577.260973] ? trace_hardirqs_on+0x10/0x10 [ 577.265204] do_filp_open+0x179/0x3c0 [ 577.268989] ? may_open_dev+0xe0/0xe0 [ 577.272797] ? lock_downgrade+0x740/0x740 [ 577.276937] ? do_raw_spin_unlock+0x164/0x220 [ 577.281424] ? _raw_spin_unlock+0x29/0x40 [ 577.285651] ? __alloc_fd+0x1be/0x490 [ 577.289455] do_sys_open+0x296/0x410 [ 577.293161] ? filp_open+0x60/0x60 [ 577.296800] ? __do_page_fault+0x159/0xad0 [ 577.301035] ? do_syscall_64+0x4c/0x640 [ 577.305009] ? SyS_open+0x30/0x30 [ 577.308459] do_syscall_64+0x1d5/0x640 [ 577.312354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.317551] RIP: 0033:0x45deb9 [ 577.320744] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.328436] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 577.335702] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 577.342960] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 18:27:11 executing program 2 (fault-call:0 fault-nth:18): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, r0) 18:27:11 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, 0x0) 18:27:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000414d7c1d6aba01a425cfac60a128cedc1037e0fe984e5c5ae041e0cab8d7d3aa48e036b211ad51376bdba4ad611c25cdacb5161d53beb40fab86eeac8fc1500a68bd62c1b97e1eac8bff52c14aedb4b61e70d384acc7726b15008323e8d64ff1fa37ba00133aded976d9384a8bcb8efaeec2cb1f74f12c3cd459b289e48d5f9b5162cd381067bbf974870a54fda04a9dda875fe73115cc37c29b7efa81f3740ec298d27e8544cd731397068f27b34807d2a6789014b2e1e0d1900752a31ea25408876d23500f91fd951d41ed1b6602363b", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250700000008000100380000000800050007000000080005000000000014000400767863616e31000000000000000000000500530001000000"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x800) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:11 executing program 4 (fault-call:0 fault-nth:15): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 577.350227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 577.357478] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:11 executing program 5: r0 = add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x581400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xd6a, 'syz0\x00', @bcast, 0x0, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd990001000000150000000c0043000300000000100000b580a6eea46be8b7486f7b938b49ee1f3bfacb09f31ccb4626e0590e18fefbc24b1e64c0af9892a10e2b"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x1, r1}) 18:27:11 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x17}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x700, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xaf}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x8830) socketpair(0xa, 0xa, 0x9383, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x178, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x57}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa7d3}, @NL80211_ATTR_IE={0x138, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x3}}, @random={0x40, 0x86, "925700fd04f61e56e38e90e5599f89acddf78e35c347903584ba7b9eb4f8be117079157e61acfd8078b7b6de3130f35088b35285b96b189b379821b16ffe5fe79eec9a7f7448abc224d4d356c23871da3eb33de39313efea9757ee5d839e8db919e408b655d0b41212b7004dc404b72d2e4e17000b01f93be359f0a1d52e8f7c36c7f5a7de5f"}, @random_vendor={0xdd, 0x7d, "cd3f6632110cb1f5d6747b6000d65362008c41b119864d7651000f0c4438b652b2c03ab3b5a51c9337a3906ebe4b3655ede3c8bcded9f6b4ad96c2aa9d35f3910166fbac7553c1208ba3915233e194cd6869e0e3c2ec0bdb5b160d419168cf263df10917a4c2f0df73800c045d547ff049b2a7f218a60ade9d87808a55"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xac, 0x40}}, @gcr_ga={0xbd, 0x6, @broadcast}, @channel_switch={0x25, 0x3, {0x1, 0x143, 0x3f}}, @link_id={0x65, 0x12, {@random="ff8b10ee3713", @broadcast}}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x2004c044}, 0x800) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x8, 0xfa}) add_key(&(0x7f0000000040)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 577.423941] FAULT_INJECTION: forcing a failure. [ 577.423941] name failslab, interval 1, probability 0, space 0, times 0 [ 577.441892] CPU: 1 PID: 7960 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 577.449712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.459078] Call Trace: [ 577.461678] dump_stack+0x1b2/0x283 [ 577.465317] should_fail.cold+0x10a/0x154 [ 577.469474] should_failslab+0xd6/0x130 [ 577.473457] kmem_cache_alloc_trace+0x29a/0x3d0 [ 577.478136] snd_seq_port_connect+0x5d/0x4d0 [ 577.482549] ? _raw_read_unlock+0x29/0x40 [ 577.486711] ? check_subscription_permission.isra.0+0x112/0x1e0 [ 577.492785] snd_seq_ioctl_subscribe_port+0x1d4/0x370 [ 577.497982] ? snd_seq_ioctl_unsubscribe_port+0x370/0x370 [ 577.503528] ? mark_held_locks+0xa6/0xf0 [ 577.507598] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 577.512712] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 577.517562] snd_seq_oss_midi_open+0x485/0x590 18:27:11 executing program 3: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000012c0)=0x80) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) [ 577.522147] ? snd_seq_oss_midi_setup+0x50/0x50 [ 577.526917] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 577.531943] snd_seq_oss_midi_open_all+0x79/0xc0 [ 577.536710] snd_seq_oss_open+0x7c1/0x950 [ 577.540870] odev_open+0x62/0x80 [ 577.544245] ? odev_release+0x70/0x70 [ 577.548049] soundcore_open+0x3ee/0x5a0 [ 577.552027] ? sound_devnode+0xe0/0xe0 [ 577.555920] chrdev_open+0x23c/0x6d0 [ 577.559635] ? __register_chrdev+0x3d0/0x3d0 [ 577.564169] do_dentry_open+0x44b/0xec0 [ 577.568148] ? __register_chrdev+0x3d0/0x3d0 [ 577.572565] ? __inode_permission+0xcd/0x2f0 [ 577.576982] vfs_open+0x105/0x220 [ 577.580441] path_openat+0x628/0x2970 [ 577.584251] ? path_lookupat+0x780/0x780 [ 577.588348] ? trace_hardirqs_on+0x10/0x10 [ 577.592698] do_filp_open+0x179/0x3c0 [ 577.596487] ? may_open_dev+0xe0/0xe0 [ 577.600315] ? lock_downgrade+0x740/0x740 [ 577.604457] ? do_raw_spin_unlock+0x164/0x220 [ 577.608958] ? _raw_spin_unlock+0x29/0x40 [ 577.613105] ? __alloc_fd+0x1be/0x490 [ 577.616926] do_sys_open+0x296/0x410 [ 577.620625] ? filp_open+0x60/0x60 [ 577.624156] ? __do_page_fault+0x159/0xad0 [ 577.628373] ? do_syscall_64+0x4c/0x640 [ 577.632350] ? SyS_open+0x30/0x30 [ 577.635787] do_syscall_64+0x1d5/0x640 [ 577.639665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.644939] RIP: 0033:0x45deb9 [ 577.648122] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.655814] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 577.663087] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 577.670369] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 577.677637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 577.684930] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:11 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@x={0x94, 0xd, "4e4667ea7ca0"}, @t={0x81, 0x1}, @generic={0x80}, @x={0x94, 0x8, "50849f49eddd"}, @t={0x0, 0x8, 0xeb, 0x2}, @l={0x92, 0xe, 0xb0, 0x19, 0x1, 0xff, 0x3}, @e={0xff, 0x1, 0xb, 0x7f, @SEQ_CONTROLLER, 0x6, 0x81, 0x9}, @s={0x5, @SEQ_MIDIPUTC=0xae, 0x15, 0x40}, @v={0x93, 0xf, 0x30, 0x1c, @MIDI_NOTEON=@special, 0x4c, 0xffc0}], 0x3d) 18:27:11 executing program 5: r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000300)="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", 0xfa, 0xfffffffffffffff9) add_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='big_key\x00', 0x0, 0x0, 0x0, r0) 18:27:11 executing program 2 (fault-call:0 fault-nth:19): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 577.716087] FAULT_INJECTION: forcing a failure. [ 577.716087] name failslab, interval 1, probability 0, space 0, times 0 18:27:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x9b) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 577.769209] CPU: 0 PID: 7963 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 577.777046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.786402] Call Trace: [ 577.789001] dump_stack+0x1b2/0x283 [ 577.792635] should_fail.cold+0x10a/0x154 [ 577.796823] should_failslab+0xd6/0x130 [ 577.800808] kmem_cache_alloc_trace+0x29a/0x3d0 [ 577.805491] snd_seq_oss_writeq_new+0x88/0x260 [ 577.810082] ? snd_seq_oss_readq_info_read+0x100/0x100 18:27:11 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0xd56) [ 577.815557] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 577.821017] ? __lockdep_init_map+0x100/0x560 [ 577.825520] ? __raw_spin_lock_init+0x28/0x100 [ 577.830110] snd_seq_oss_open+0x6b4/0x950 [ 577.834271] odev_open+0x62/0x80 [ 577.837936] ? odev_release+0x70/0x70 [ 577.841747] soundcore_open+0x3ee/0x5a0 [ 577.845756] ? sound_devnode+0xe0/0xe0 [ 577.849663] chrdev_open+0x23c/0x6d0 [ 577.853378] ? __register_chrdev+0x3d0/0x3d0 [ 577.857795] do_dentry_open+0x44b/0xec0 [ 577.861773] ? __register_chrdev+0x3d0/0x3d0 18:27:11 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @pic={0x1, 0x2, 0x4, 0x3, 0x0, 0x5, 0x7f, 0xfb, 0xfd, 0xd3, 0xff, 0x6, 0xfa, 0x5}}) [ 577.866193] ? __inode_permission+0xcd/0x2f0 [ 577.870612] vfs_open+0x105/0x220 [ 577.874074] path_openat+0x628/0x2970 [ 577.877884] ? path_lookupat+0x780/0x780 [ 577.881968] ? trace_hardirqs_on+0x10/0x10 [ 577.886248] do_filp_open+0x179/0x3c0 [ 577.890055] ? may_open_dev+0xe0/0xe0 [ 577.893868] ? lock_downgrade+0x740/0x740 [ 577.898110] ? do_raw_spin_unlock+0x164/0x220 [ 577.902613] ? _raw_spin_unlock+0x29/0x40 [ 577.906824] ? __alloc_fd+0x1be/0x490 [ 577.910636] do_sys_open+0x296/0x410 [ 577.914356] ? filp_open+0x60/0x60 18:27:11 executing program 5: add_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x100, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) [ 577.917906] ? __do_page_fault+0x159/0xad0 [ 577.922146] ? do_syscall_64+0x4c/0x640 [ 577.926132] ? SyS_open+0x30/0x30 [ 577.929595] do_syscall_64+0x1d5/0x640 [ 577.933499] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.938712] RIP: 0033:0x45deb9 [ 577.941903] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.949616] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 577.956894] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 577.964168] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 [ 577.971443] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 577.978716] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 577.998841] FAULT_INJECTION: forcing a failure. [ 577.998841] name failslab, interval 1, probability 0, space 0, times 0 [ 578.014331] CPU: 0 PID: 7991 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 578.022157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.031522] Call Trace: [ 578.034215] dump_stack+0x1b2/0x283 [ 578.037861] should_fail.cold+0x10a/0x154 [ 578.042032] should_failslab+0xd6/0x130 [ 578.046026] kmem_cache_alloc_trace+0x29a/0x3d0 [ 578.050723] snd_seq_port_connect+0x5d/0x4d0 [ 578.055152] ? _raw_read_unlock+0x29/0x40 [ 578.059313] ? check_subscription_permission.isra.0+0x112/0x1e0 [ 578.065387] snd_seq_ioctl_subscribe_port+0x1d4/0x370 18:27:11 executing program 4 (fault-call:0 fault-nth:16): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:11 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, r0) 18:27:11 executing program 5: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x5) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x2}], 0xc2, 0x0, &(0x7f0000000180)="310938f583772d41661122802c4699186f8e3dcaed3849fe5f8ab773d6eafcc07c420afa096aba485fc8549b70b448f8ea67bcaa9ddfefc756304c7d3d179a25b3d33e6b2dca37b9748a045ee89014cb46ebd8af59c32c3fe3fafc97696009cd89139f69ecba65041f6b0be4b2411f3a081346d1a0f2040f33b350c6de096908c404c0a87e35ccda1d2910307955a39b3999dabb4b0a39f90fe19f88401d3c886e373201053b7bb6b486cbaabe479352a1cfa63f3c92862e04c6f619ccbbe67517c6"}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x70d6fdfd66c77036}, 0x10) [ 578.070598] ? snd_seq_ioctl_unsubscribe_port+0x370/0x370 [ 578.076151] ? mark_held_locks+0xa6/0xf0 [ 578.080236] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 578.085361] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 578.090214] snd_seq_oss_midi_open+0x485/0x590 [ 578.094835] ? snd_seq_oss_midi_setup+0x50/0x50 [ 578.099525] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 578.104578] snd_seq_oss_midi_open_all+0x79/0xc0 [ 578.109374] snd_seq_oss_open+0x7c1/0x950 [ 578.113532] odev_open+0x62/0x80 [ 578.116903] ? odev_release+0x70/0x70 18:27:11 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) [ 578.120701] soundcore_open+0x3ee/0x5a0 [ 578.124676] ? sound_devnode+0xe0/0xe0 [ 578.128561] chrdev_open+0x23c/0x6d0 [ 578.132279] ? __register_chrdev+0x3d0/0x3d0 [ 578.136698] do_dentry_open+0x44b/0xec0 [ 578.140678] ? __register_chrdev+0x3d0/0x3d0 [ 578.145387] ? __inode_permission+0xcd/0x2f0 [ 578.149802] vfs_open+0x105/0x220 [ 578.153267] path_openat+0x628/0x2970 [ 578.157086] ? path_lookupat+0x780/0x780 [ 578.161164] ? trace_hardirqs_on+0x10/0x10 [ 578.165453] do_filp_open+0x179/0x3c0 18:27:11 executing program 3: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@target_default='target default\x00', 0xf) [ 578.169268] ? may_open_dev+0xe0/0xe0 [ 578.173084] ? lock_downgrade+0x740/0x740 [ 578.177247] ? do_raw_spin_unlock+0x164/0x220 [ 578.181839] ? _raw_spin_unlock+0x29/0x40 [ 578.186005] ? __alloc_fd+0x1be/0x490 [ 578.189819] do_sys_open+0x296/0x410 [ 578.193553] ? filp_open+0x60/0x60 [ 578.197104] ? __do_page_fault+0x159/0xad0 [ 578.201344] ? do_syscall_64+0x4c/0x640 [ 578.205319] ? SyS_open+0x30/0x30 [ 578.208790] do_syscall_64+0x1d5/0x640 [ 578.212689] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 578.217876] RIP: 0033:0x45deb9 18:27:12 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @remote, @bcast, @default, @null, @netrom, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) [ 578.221063] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.228792] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 578.236068] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 578.243341] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 578.250614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 578.257898] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 578.281800] FAULT_INJECTION: forcing a failure. [ 578.281800] name failslab, interval 1, probability 0, space 0, times 0 [ 578.293168] CPU: 0 PID: 8044 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 578.300971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.310326] Call Trace: [ 578.312926] dump_stack+0x1b2/0x283 [ 578.316561] should_fail.cold+0x10a/0x154 [ 578.320714] should_failslab+0xd6/0x130 [ 578.324696] kmem_cache_alloc_trace+0x29a/0x3d0 [ 578.329369] snd_seq_port_connect+0x5d/0x4d0 [ 578.333814] ? _raw_read_unlock+0x29/0x40 [ 578.337968] ? check_subscription_permission.isra.0+0x112/0x1e0 [ 578.344031] snd_seq_ioctl_subscribe_port+0x1d4/0x370 [ 578.349229] ? snd_seq_ioctl_unsubscribe_port+0x370/0x370 [ 578.354768] ? mark_held_locks+0xa6/0xf0 [ 578.358838] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 578.363948] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 578.368800] snd_seq_oss_midi_open+0x485/0x590 [ 578.373394] ? snd_seq_oss_midi_setup+0x50/0x50 [ 578.378077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 578.383097] snd_seq_oss_midi_open_all+0x79/0xc0 [ 578.387856] snd_seq_oss_open+0x7c1/0x950 [ 578.392041] odev_open+0x62/0x80 [ 578.395407] ? odev_release+0x70/0x70 [ 578.399199] soundcore_open+0x3ee/0x5a0 [ 578.403179] ? sound_devnode+0xe0/0xe0 [ 578.407049] chrdev_open+0x23c/0x6d0 [ 578.410830] ? __register_chrdev+0x3d0/0x3d0 [ 578.415235] do_dentry_open+0x44b/0xec0 [ 578.419199] ? __register_chrdev+0x3d0/0x3d0 [ 578.423639] ? __inode_permission+0xcd/0x2f0 [ 578.429353] vfs_open+0x105/0x220 [ 578.432792] path_openat+0x628/0x2970 [ 578.436592] ? path_lookupat+0x780/0x780 [ 578.440652] ? trace_hardirqs_on+0x10/0x10 [ 578.444913] do_filp_open+0x179/0x3c0 [ 578.448721] ? may_open_dev+0xe0/0xe0 [ 578.452519] ? lock_downgrade+0x740/0x740 [ 578.456747] ? do_raw_spin_unlock+0x164/0x220 [ 578.461234] ? _raw_spin_unlock+0x29/0x40 [ 578.465369] ? __alloc_fd+0x1be/0x490 [ 578.469168] do_sys_open+0x296/0x410 [ 578.472874] ? filp_open+0x60/0x60 [ 578.476408] ? __do_page_fault+0x159/0xad0 [ 578.480646] ? do_syscall_64+0x4c/0x640 [ 578.484622] ? SyS_open+0x30/0x30 [ 578.488059] do_syscall_64+0x1d5/0x640 [ 578.491936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 578.497117] RIP: 0033:0x45deb9 [ 578.500300] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.508047] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 578.515338] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 578.522599] RBP: 00007f8287ccbca0 R08: 0000000000000000 R09: 0000000000000000 18:27:12 executing program 2 (fault-call:0 fault-nth:20): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:12 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xfffffffffffffff5, r1}, 0x10) 18:27:12 executing program 3: r0 = add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) 18:27:12 executing program 4 (fault-call:0 fault-nth:17): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) [ 578.529857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 578.537128] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c 18:27:12 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xffff}, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000200)={0x0, "ee2068230e93edbc64c2003cf430b17fbd5c73386fec0c765e954f05164b71bacaff5aeb73ab5a3f399b459f60a19cff311db7cbbaf4a36eb10ac9272d076963", 0x1e}, 0x48, 0xfffffffffffffff9) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x20}, 0x8) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x80001, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x20, 0xffff, 0x8, 0xbda1, 0x8, 0x6, 0xfff}}, 0x50) 18:27:12 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x1}) [ 578.608307] FAULT_INJECTION: forcing a failure. [ 578.608307] name failslab, interval 1, probability 0, space 0, times 0 [ 578.629677] CPU: 0 PID: 8076 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 578.637500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.646887] Call Trace: [ 578.649482] dump_stack+0x1b2/0x283 [ 578.653154] should_fail.cold+0x10a/0x154 [ 578.657313] should_failslab+0xd6/0x130 [ 578.661300] kmem_cache_alloc_trace+0x29a/0x3d0 [ 578.666071] snd_seq_port_connect+0x5d/0x4d0 [ 578.670593] ? _raw_read_unlock+0x29/0x40 [ 578.674745] ? check_subscription_permission.isra.0+0x112/0x1e0 [ 578.680820] snd_seq_ioctl_subscribe_port+0x1d4/0x370 [ 578.686021] ? snd_seq_ioctl_unsubscribe_port+0x370/0x370 [ 578.691565] ? mark_held_locks+0xa6/0xf0 [ 578.693582] binder: 8079:8085 ioctl 4018620d 0 returned -22 [ 578.695632] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 578.695660] snd_seq_kernel_client_ctl+0xd4/0x1a0 [ 578.695674] snd_seq_oss_midi_open+0x485/0x590 [ 578.695683] ? snd_seq_oss_midi_setup+0x50/0x50 [ 578.695700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 578.695712] snd_seq_oss_midi_open_all+0x79/0xc0 [ 578.695722] snd_seq_oss_open+0x7c1/0x950 [ 578.695733] odev_open+0x62/0x80 [ 578.695745] ? odev_release+0x70/0x70 [ 578.707742] binder: 8079:8085 ioctl 4018620d 20000000 returned -22 [ 578.711397] soundcore_open+0x3ee/0x5a0 [ 578.711413] ? sound_devnode+0xe0/0xe0 18:27:12 executing program 5: r0 = add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x400, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f00000000c0)=0x137) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)={0x150, 0x0, 0x0, [{{0x4, 0x3, 0x1f, 0x2, 0xc8, 0x80000001, {0x0, 0x7ff, 0x0, 0x1ff, 0x8, 0x7f, 0x4, 0x95f, 0x80, 0x8000, 0x7, 0xee00, 0xffffffffffffffff, 0x0, 0x9d97}}, {0x6, 0x7, 0x1, 0xfb, '&'}}, {{0x5, 0x3, 0xc02, 0x1, 0x8, 0x7, {0x1, 0x4, 0x3f, 0x101, 0x7fff, 0xf899, 0x2, 0xffffff18, 0x7, 0x4000, 0xc3a, 0xee00, 0xee00, 0x4, 0x3}}, {0x2, 0xf40, 0x6, 0x5, 'logon\x00'}}]}, 0x150) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r5) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x0, {{0x5, 0xfff, 0x2, r5}}}, 0x28) [ 578.711427] chrdev_open+0x23c/0x6d0 [ 578.721598] binder: 8079:8086 ioctl 4018620d 0 returned -22 [ 578.725824] ? __register_chrdev+0x3d0/0x3d0 [ 578.725840] do_dentry_open+0x44b/0xec0 [ 578.725848] ? __register_chrdev+0x3d0/0x3d0 [ 578.725860] ? __inode_permission+0xcd/0x2f0 [ 578.725869] vfs_open+0x105/0x220 [ 578.725879] path_openat+0x628/0x2970 [ 578.725894] ? path_lookupat+0x780/0x780 [ 578.725903] ? trace_hardirqs_on+0x10/0x10 [ 578.725919] do_filp_open+0x179/0x3c0 [ 578.725928] ? may_open_dev+0xe0/0xe0 18:27:12 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x6}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 578.725941] ? lock_downgrade+0x740/0x740 [ 578.725954] ? do_raw_spin_unlock+0x164/0x220 [ 578.725969] ? _raw_spin_unlock+0x29/0x40 [ 578.818659] ? __alloc_fd+0x1be/0x490 [ 578.822474] do_sys_open+0x296/0x410 [ 578.826230] ? filp_open+0x60/0x60 [ 578.829787] ? __do_page_fault+0x159/0xad0 [ 578.834029] ? do_syscall_64+0x4c/0x640 [ 578.838005] ? SyS_open+0x30/0x30 [ 578.841462] do_syscall_64+0x1d5/0x640 [ 578.845366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 578.850556] RIP: 0033:0x45deb9 18:27:12 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$negate(0xd, r1, 0x4, r0) 18:27:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf256c0000000c00991001000000250000000500180120000000050019010a00000008009f00050000e38a30a000080000002a74fec4c52d87a4672acb0f12429ec88d33c5868538f351bf075c3bd862ba0b8d1e37287889b1adc5a06e8e01a6b60694372b0e6c3cccc9edfb2896ae764d02a9d06fed6bce0c0ceca464993a99a1c01618f6d1638679a8e2e39d1728f14d9160d8f1d49b43929100"/173], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:12 executing program 2 (fault-call:0 fault-nth:21): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:12 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) [ 578.853745] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.861479] RAX: ffffffffffffffda RBX: 0000000000023c40 RCX: 000000000045deb9 [ 578.868749] RDX: 000000000014d702 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 578.876048] RBP: 00007ff3dc0f5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 578.883345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 578.890645] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:12 executing program 4: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)={0x1, 0xb0b, &(0x7f0000000000)="1f976a69f95363e64ec5cab2917ca63e54b7c0132582f83bbdd93658b64f1157f297bc0eedc02d2439521afa51abd05de2aadecc0e5fff5a6e8f0cb48adc60ab4975e5bc20f4f85d01941ee579d5f4f3b3c5d28b3acff11496ec45fcb4c98e51fe7771de5836dfc151cf7f9fc126c9b66981565bd517bf46f8299950312e0fddc453c6126ea739b8b5b92dbedd2968b50d3d09799e7d9b257b8f018ec36f5d0e37ca0268c56c3849d4a1d9d4f92499ecf6949fd62f730ebb43b817", &(0x7f0000000100)="309af2b382feb89f1a324643bd0bfe7e31e2314f8d252d923e234cc4ede3d547f9ce69c9bebec1d535d9376fe23a1c7bba9a5703fe7093f510368c24c3b80e214103f10a317165d9d946400e2845a7dea9ecdade2571280d6ec38dbccd54d293e30f805d5c2ecca715f23e2ee291c396aad766bb3a729d04a57b164669b96f721600f6e05a26695990945c5c55441ee51b0e080f8fb2a435872f5b796a1accaf3df0655285b8de30ffbba29936f6122609402a6e479c2aab04c180a088576684d26abb81fe5758294125aaca1b740b9b712e9da2", 0xbb, 0xd4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:12 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) keyctl$negate(0xd, 0x0, 0x8001, r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 18:27:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='id_legacy\x00', 0x0) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@dellinkprop={0x78, 0x6d, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x900, 0x8}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x44f0}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'vlan1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040044}, 0x1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) 18:27:12 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x32, 0xfffffffffffffffa) 18:27:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:12 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x167802, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x1c}) 18:27:12 executing program 3: r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 18:27:12 executing program 4: keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0xfffffffffffffff8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x59d702, 0x0) 18:27:12 executing program 2: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb4, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x12, 0x45, "667f8b4bf1e186b3598224fcc680"}, @NL80211_ATTR_TESTDATA={0x8a, 0x45, "dcaf551b64d71f2a0c5be859876e424ed733aecd08657e012387f8cc4d8090357e96bc0045515818fddb1bca47cd8e6e3dd46cc5d4af96af8f63f86a112ab46cf12f661795a05f82811388d851fae615314295a22abc5c30cd88b02396c3ab302dd2eaf58c9c3afbf29afed4f0b07bcff2eb302e0a80f55296d17f9434b0a804f316a6447dbc"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008081) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:12 executing program 5: r0 = add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f00000000c0)={0x0, "1db95524834adda2165dd7b780f73073bae884327ad324470dc3050a675782d7d944d214c2ef9b09764d17fa6a45af4a3c99f8ca8f451771504d635e384c174f", 0x33}, 0x48, r0) keyctl$link(0x8, r0, r1) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000280)='logon\x00', &(0x7f00000002c0)='@+\x00') ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r3) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="5bfd03813530503cb89763ab9addbe17c027982e53e651be7253998d238b02a2edb7b92429302bae7280419c56ffdaf32eae81ec271261f5fdd5ec5a7c8d39133cea2cefe59640c051b7e9cc911571495f3c84a0ea66aec546cd600381cc588a6872adbc006b425d9a0643d7670fa91402", 0x71, r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200340, 0x0) 18:27:12 executing program 3: gettid() r0 = getpid() write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xfffffffffffffff5, 0x0, {{0x7fff, 0x2, 0x1, r0}}}, 0x28) waitid(0x2, r0, 0x0, 0x8, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000040)=0x6) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:12 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x88900, 0x0) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000080)=0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200000, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@v={0x93, 0x6, 0x80, 0xc, @generic=0x8, 0x3f, 0x9}, @e={0xff, 0x3, 0xd, 0x6, @generic=0x4, 0x1, 0xff, 0x9}, @s={0x5, @generic=0x75, 0x1d, 0x2}], 0x14) 18:27:13 executing program 3: add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) clock_getres(0x5, &(0x7f0000000080)) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x8000, 0x4) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x4) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:13 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) 18:27:13 executing program 2: write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb48}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x309080, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x4001, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, r2, {0xfff}}, 0x18) 18:27:13 executing program 3: add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1f0}) 18:27:13 executing program 5: add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000001100)={0x3}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000010c0)={0x7fffffff, 0x5eb, &(0x7f0000000040)="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", &(0x7f0000001040)="95b7dda9a56b6b5cc65bafd99a6c2da00249ab2803d1dffe050826be69b6d179cc3604cac4d5944c247616b6bf095c88e49faef484c89af0c5d8e56b0e447c5efcbba32211", 0x1000, 0x45}) 18:27:13 executing program 2: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:13 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x3, 0x81, 0x800, 0x695e, 0x4c27, 0x8001, 0x400, 0xa5}, &(0x7f0000000080)={0xfffffffffffffdfc, 0x100, 0x100000000, 0x9, 0x8001, 0xa88a, 0x7, 0x2}, &(0x7f00000000c0)={0xffffffffffffffe1, 0x20, 0x4, 0x3, 0x97f, 0x1, 0x6, 0x2fd6702e}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8}) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x35df00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000440)={r2, 0x10000, 0x721b, r3}) sendmsg$nl_crypto(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@alg={0xf0, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {{'drbg_pr_sha512\x00'}, [], [], 0x400, 0x3400}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x7fff}]}, 0xf0}}, 0x8093) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r4, 0x40045109, &(0x7f0000000240)) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) socketpair(0x23, 0x5, 0x8, &(0x7f0000000000)) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:13 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, r1) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x1, 0x4) 18:27:13 executing program 5: ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x1, @bcast, @netrom={'nr', 0x0}, 0xffffffff, 'syz1\x00', @null, 0x8001, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) getitimer(0x2, &(0x7f00000000c0)) 18:27:13 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:13 executing program 2: ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x7810, 0x9}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000280)={0x8, 0x1ff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x1}}, 0x18) gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000300)={r4, 0x80000000}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="0008000300", @ANYRES32=r3, @ANYBLOB="78002a00376c01013c1d03fdbe7525c4871c94977aa2295c2482d5532a861b7b6e6787ff7f63f338a266995d8d38cb9b53bf4f9845318b504b50d3effb7bb3a6b4f00a8a8bd84ef4cfff19d7a9e3920bdfe5164f3a9b5e460218ad4c1924480be52ab2a152bf933b3e6d03f3d1a23c55c2321001cd1001e70600b100ff0f00000600b1003f0000000600b100090000000600b100a50000000600b10005000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4844}, 0x4) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) 18:27:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x61c842, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140)) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @bcast, @default, @default, @rose, @null, @bcast, @null]}, &(0x7f00000000c0)=0x48, 0x80800) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:13 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @default, @default, @bcast, @rose, @default, @rose, @netrom]}, &(0x7f0000000080)=0x48) clock_getres(0x5, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:13 executing program 5: r0 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='rxrpc_s\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000080)='id_resolver\x00', 0x0, 0x0, 0x0, r0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x140, 0x0) 18:27:13 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @auto=[0x62, 0x32, 0x52, 0x31, 0x37, 0x36, 0x65, 0x36, 0x36, 0x65, 0x31, 0x66, 0x39, 0x61, 0x0, 0x66]}, &(0x7f00000000c0)={0x0, "bb7d4296fa766ee6a301f127b4fed4d986710d4d0ac48af4853af085491f94b1388d6d3b9b20a5890976e44a9d5a6b2bac2ca9810e42382f54f7dbc4a21f7d1a", 0x35}, 0x48, r1) 18:27:13 executing program 4: r0 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/sequencer\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) write$sequencer(r0, &(0x7f0000000280)=[@v={0x93, 0x3, 0x80, 0x1c, @generic=0x43, 0x81, 0x6}, @t={0x102, 0x4, 0x2, 0x1}, @l={0x92, 0x7, 0xc0, 0xd, 0xbb, 0x8b, 0xf741}, @e={0xff, 0x0, 0xd, 0x6b, @SEQ_CONTROLLER=0xff, 0x7, 0x20, 0x9b}, @v={0x93, 0xb, 0x90, 0x15, @generic=0xff, 0x2, 0x1ec9}, @t={0x4, 0x3, 0x4, 0x7, @generic=0x6}, @x={0x94, 0xa, "910951215c99"}, @raw={0xfe, 0xa, "7fe8f6cc00e6"}], 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x2, 0xd}, @flat=@binder={0x73622a85, 0x1004}, @fd}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @request_death], 0xa3, 0x0, &(0x7f0000000180)="657ca9a9f38eed3d8b59e1523bf6a13cdc4ad5cd5f7794a004a00a2cb329058b2c06f0213fea743653e47b29495d54c293d2d2351bc9e9294301a37c067379db762d739f3f81da04d62d8d3421c7f97fc20bd3ceed90d065097678ab3eb0668fc092100036ffed7395ecf52aaa5bda85f6fa64441b2291c7f4767efcc1b32dcd5306741326135e1ba5f210c115e5e4c8c399edf5fbb40a8ce6159179988555e28f20e0"}) 18:27:13 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r2, 0x0, 0x0) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000000)=""/106, 0x6a, &(0x7f00000000c0)=""/155, 0x2, 0x3}}, 0x48) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x238080, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xdc702, 0x0) [ 579.609883] binder: 8233:8235 ioctl 4018620d 0 returned -22 [ 579.645624] binder: 8233:8241 ioctl 4018620d 0 returned -22 18:27:13 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) getrusage(0x1, &(0x7f00000000c0)) 18:27:13 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x29c000, 0x488, &(0x7f0000000000), &(0x7f0000000040)="e24db93aa7776c32d57e7110ade9c2b23935d076", 0x0, 0x14}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x600, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)=0x5e) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000100)={0x3f, 0x8, 0x9, 0x4, 0x3ff}) 18:27:13 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$link(0x8, r0, r1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x10000, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x221d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x8000, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000000300)={0x0, r6}) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000000)={0x100000001, 0x4}) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xe81c1, 0x0) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480241, 0x0) 18:27:13 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$get_persistent(0x16, r0, r1) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x28, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@fwd={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x23, 0x6}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x54, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x0]}}, &(0x7f0000002500)=""/4096, 0x7b, 0x1000}, 0x20) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) 18:27:13 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r0, 0x3, r0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='\x00', r0) 18:27:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0xff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e630c400200000000000000000000630c480300000000000000000000000000000000007b546aa0617fdce3d429e249cf2b15d22bf3d0d63bd0090000008a5fb569ebf3c5c445b50f47e37033f5bda29d4c1f0db3f6e198f4cba76d09eda895"], 0xdb, 0x0, &(0x7f00000002c0)="ce53c2e10cfed53a6cfc8e2958404eeec35af2b86ff1a5b9cc164beb7919774e7a8e953dc7d04ef530809cce54c20eccf2c650f3843cf966fde3588a8b5afb29ef6df192825547beaf902e3edc6c2fdfa024311f9d4d07c10706af466e97894328b1b956018480762393ad5fb38ef2159c227b08af424339476772e2221ca5914db27840683920b9ced2944717db2537f8b2180484e1c3b09b61ffe516057246f7b1571c5d8cf5a63bf028a5ff5f1d8a6ce3f1111f39cf206fc0903c312c7133d193a770a67bf3b80bf27796b189a81055c9c2c45deef2e62b60de"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000480)={0x0, 0x400, 0x2, &(0x7f0000000280)=0x6}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000500)={0x7fffffff, 0x1, 0x1e, 0x9}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="45022cbd7000fe069e2ff084df1cdbdf257c0000000c009900010400002b0000000a00060008021100000000000a000e00ff"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) 18:27:13 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002100)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x4000000000000000, 0x0, 0xce, 0x15, {0x0, 0x7ff, 0x3ff, 0x4, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x3, 0x6000, 0x2, r0, 0xffffffffffffffff, 0xa18, 0x17}}, {0x0, 0x11}}}, 0xa0) 18:27:13 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000000c0)={0x0, "c0c652f6be7d2eedaa8ffb0ce9ab90ba7806f4b5da1e81fa40092b9132423aa014a1d7e08f8b97df75f90b86dc00de196e4ed2e0dd2cfbac6b3701df1045070f", 0x34}, 0x48, r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000500)=0x7, 0x4) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000200)={0x0, 0x5}) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x400, 0x480000) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x15d701, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x22, 0x2a, [@erp={0x2a, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @mic={0x8c, 0x10, {0xb23, "c5e0248518ab", @short="5b3063496305c1be"}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8000}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="a69c03d7cbd92b983e19bfc9b31937a4f00a267eb1f2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x20004840) 18:27:13 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0x20, 0x199, &(0x7f0000000000)="553d9f5ad3e6166e5240c1cdbd4caca401b568c1616fcb310c6a5e505d20deb0e8fb6a2915f3734afb5ac41c69dc5c7f6d936af24c6f1d8fe515a381423a2507f105c9ba179aff54ec1db63aafc7f5bfb9b146f35655c607cf4e169a05025af6d68f449dc50e92de831d9a49f7", &(0x7f00000000c0)="d48c3e93e9d5ee6fb7d400ee6e349569663708e2b011ce9709bc702b25c98c16c9d85fab3a2909428ba1d2ca44dce37463cc8a0ce52a52849a144f662d210c81ce7a49f28235a5024c322e46358d23fdd195e4141f618c570cc39edabd3f969cd1fb1901b4cfd0dba051218f57d59d33471315c2c50a9ca1e5adc2b4a94b7e9047de84d0d0d3ebc035083b266c547339f9cb1cb209d6dbc221320091236f78556fe4e5dd5e1da9ab0e402c40d74a58d3cb2d794e8579cbe8bc9071e4e9f2e05b20a9be045ac2ce3b1e3924ca9f211969be9775fa5221dbcd8a0b5886ed", 0x6d, 0xdd}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) [ 579.873300] binder: 8282:8284 ioctl 4018620d 0 returned -22 [ 579.897137] binder: 8282:8284 unknown command 215052 [ 579.910057] binder: 8282:8284 ioctl c0306201 200003c0 returned -22 18:27:13 executing program 2: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x6, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/122, 0x7a}, {&(0x7f00000012c0)=""/49, 0x31}, {&(0x7f0000001300)=""/131, 0x83}, {&(0x7f00000013c0)=""/128, 0x80}, {&(0x7f0000001440)=""/9, 0x9}, {&(0x7f0000001480)=""/243, 0xf3}], 0x9, &(0x7f0000001640)=""/255, 0xff}, 0x4) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x29d947, 0x0) 18:27:13 executing program 5: ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x1, 0x5000}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001340)='/dev/ocfs2_control\x00', 0x800, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) getpeername$netrom(r2, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x9, 0xffffffa2, r1}) 18:27:13 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all='unlock all\x00', 0xb) 18:27:13 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getpid() 18:27:13 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x105580, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0xffff, 0x4, 0x7fff}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r2) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, r1) 18:27:13 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x80000001}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc005) read$FUSE(r0, 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x6}}, 0x20) 18:27:13 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) add_key(&(0x7f0000000080)='logon\x00', 0x0, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x904, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd2, 0x42}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "d5be487020e54222967364"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "7108d9cff37203f18ff1bb30b3d6"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "d481fb8cf0e4aa2179a5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x20008041) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) 18:27:13 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:13 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x145383, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x5, r1}) 18:27:13 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x210200, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)) r1 = userfaultfd(0x80000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ff1000/0xd000)=nil, 0xd000}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=""/116, 0x74}}, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}, 0x0) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd45f087b3a293cde, 0x0) getpid() 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x50d523, 0x0) 18:27:14 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f00000000c0)) 18:27:14 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40040, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x6c, 0x1, &(0x7f0000000080)=0x1b}) r1 = eventfd(0x9) r2 = eventfd(0x80000001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0xae2a, 0x4, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) 18:27:14 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)=']\x00') 18:27:14 executing program 3: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xa0b, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x752}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000140)={0x1, 0x80000000, 0x2, 0x0, 0x5}) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3ba082, 0x0) 18:27:14 executing program 5: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/sequencer\x00', 0x33d480, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f0000006180)={0x28, 0xfffffffffffffff5, r3, {{0x4, 0x81, 0x1, r4}}}, 0x28) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r2, {0x0, 0x2}}, 0x20) 18:27:14 executing program 5: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x165782, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0x3, 0xb}, {0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40dd}, 0x10) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 18:27:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8a080, 0x0) 18:27:14 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r1, 0x1) 18:27:14 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0x320, 0xf0, 0x800, 0x480, 0x10001, 0x1000, 0x20, 0x2, {0x9, 0xfffffff8}, {0xfffffeff, 0x6, 0x1}, {0x6da3, 0x401}, {0x5, 0x20, 0x1}, 0x0, 0x82, 0x4, 0x8000, 0x1, 0x6, 0x0, 0x4000400, 0x4, 0x77a, 0x8000, 0x800000, 0x12, 0x200, 0x1, 0xa}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002200)={0xa0, 0xe1ed85c41ef472cd, 0x0, {{0x0, 0x0, 0x100000001, 0x2, 0xb7, 0x1000, {0x0, 0x9c, 0x5, 0x1000, 0x100000000, 0x8000, 0x5, 0x7f, 0x81, 0xc000, 0x8, 0x0, r1, 0xf8895e61, 0x5}}, {0x0, 0x9}}}, 0xa0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x65f, 0x9a9, &(0x7f0000000000)="6815ea2aa500e3abc20ac453bc9789c53ab5362a0f0bdeefc7b715588af0138547d4bdc6aa68b22de6d5ee33491373742aa9a49c506cfeb849cf5a4ec10d8a4edd7343566e8dc3ea2e821fd1600dccb43ed90458616f7e0066519378b9ece383baa18c2148c4b0", &(0x7f0000000100)="55e4d6ff47f9dd42596673e788e184ab862d2418a480a4ff8a1e51bcb9efa6a04f9a733e0d278bf7fcc51941314864f68ca88d55a2e22d5a384cf14e67b873c8d54fcf06ac178a268affe1217ca3ffea8fe6e89e54b3b33204e20816c419f1ac5825f8d152c5dba7309aedd7abfa68beaa69da5edd08c50fed3d9a415cf53c1bb2f8e81a620c3f9c56c5afff5d713c5696a1043481057a0fa9af0b7de44e07b47461cc36b9e62ab8449870ff93", 0x67, 0xad}) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 18:27:14 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 18:27:14 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) 18:27:14 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x76f543, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) getpeername$netrom(r0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x8}) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x20, 0xff, 0xc, 0x5, 0x1, 0x4, 0x40}}, 0x50) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002180)={0x10, 0x0, r2}, 0x10) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa00, 0x0) 18:27:14 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040)=0x0, 0xffffffffffffffff, &(0x7f0000004140)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x7fffffff) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000042c0)={0x100000, &(0x7f0000004280), 0x8, r5, 0x3}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004180)={0x78, 0x0, r1, {0x6, 0x3f, 0x0, {0x2, 0x101, 0x4, 0x9cee, 0x0, 0x8000, 0xddba, 0x2, 0x1ff, 0xc000, 0x9a, r2, r3, 0x8, 0x1}}}, 0x78) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:27:14 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000280)=0x1000) 18:27:14 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000b7059734064840", @ANYRES16=r0, @ANYBLOB="040027bd7000fbdbdf250d00000005003000000000000500330000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x4840) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) write$sequencer(r1, &(0x7f0000000180)=[@x={0x94, 0x3, "a9265791f4cb"}, @t={0x81, 0x5, 0x0, 0x0, @generic=0x101}, @e={0xff, 0xc, 0x6, 0x7c, @generic=0x8, 0x5, 0x6f, 0x3}, @l={0x92, 0xe, 0xc0, 0x11, 0x6, 0x80, 0x5f}, @v={0x93, 0x9, 0x90, 0x14, @MIDI_NOTEON=@special, 0x80, 0x1}, @t={0x85, 0x0, 0x4, 0x58, @generic=0x2}, @e={0xff, 0xa, 0xf, 0x93, @generic=0x20, 0xfa, 0x2, 0x4}], 0x38) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200280, 0x0) 18:27:14 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) keyctl$search(0xa, r1, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, r0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0xffd7, 0xfffffffffffffffc) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 18:27:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) write$FUSE_POLL(r1, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x0, {0xfffffff8}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001400000229bd7000fcdbdf250a38b400", @ANYRES32=0x0, @ANYBLOB="ffffff010000000000010800080003080008010000cffb0054af26e7e881069e651b2712ff831e9353dc6d378d51b2be0d4b9f9ffc97e98dbf375aa718e1e3134f8ef06aeadbdaa69678ed8a03344011db3fd875e510d69c34fdc045ae1ffc3dfb02a2316d612fa0e982ea56f44f49cdac90ff5e879deac91bd44904c074d186a35a6209b8630e456039e5720172ee5151cf2f579f4108ed5fbb4e2eda78367886b50787d7bb266fef8aa05a3737c7b0e2fc"], 0x3c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x48004) getpeername$netrom(r1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000200), 0x8) socketpair(0x4, 0xa, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_VENDOR_DATA={0x54, 0xc5, "b2cd53965e46692416c41c6c8bebf4f391cfe6ac598c9c6b620d65d7587408650e1feca6e0febf88a7d106afe3892da2c3273918cb9fedcea6c3e291ce060537eda35f2a611d5e0ba83f8f753a2dbe26"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x24}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x1, 0x117000}) 18:27:14 executing program 4: getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0xffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x20, 0x0, 0x80100, 0x5, 0xff80, 0x2, 0x8}}, 0x50) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x114, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x37}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c37772cbf4dead73952501d7e94b3fae4d8335cdd655cc8e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "69f5767145fa71f9058128bebed537d6f905b59447a6d36d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31588a30eee4e48cd58cb1391c602475257c5892ae49c532"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x114}, 0x1, 0x0, 0x0, 0x4005}, 0x4040030) 18:27:14 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=@deltfilter={0x1198, 0x2d, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x6}, {0xb}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x84c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_POLICE={0x814, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x0, 0x81, 0x7fffffff, 0x3f, 0x7, 0x3f, 0x52, 0xb5b, 0x9, 0x9, 0x8, 0x3ea, 0x9, 0x5, 0x65e0, 0x3, 0xcf, 0x2, 0x80000001, 0x80000000, 0xcfb, 0x0, 0x6, 0xce, 0xfffffffe, 0x2, 0x7, 0x5, 0x3, 0x7, 0x7, 0x7fff, 0x1, 0x8000, 0xce03, 0x6, 0x3ff, 0x1, 0x0, 0x2, 0x0, 0x7, 0x19e, 0xf3, 0x2, 0xdc4, 0x3, 0x1, 0x6, 0xfcd, 0x0, 0x4, 0x3, 0x8, 0x1, 0x401, 0x1, 0x8, 0xfff, 0x8000, 0x1, 0x6, 0xfffffffe, 0x180000, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x180000, 0x0, 0x80, 0xff, 0x400, 0x3, 0x7, 0x5, 0x2, 0x36b, 0x80000000, 0xe99d, 0xfffffffd, 0x3, 0x8, 0x7f, 0x8, 0x0, 0xf975, 0x3, 0x1f, 0xffff, 0x0, 0x1000, 0x386d, 0x1, 0xcc05, 0x7, 0x1, 0x10000, 0x8, 0x8, 0x6, 0x1, 0x1, 0xff, 0x1, 0x8, 0x6, 0xffffffff, 0x6c97, 0x0, 0x1, 0x3ff, 0x3971, 0x1f, 0x6, 0x8, 0x6, 0x0, 0xcd4, 0x3, 0x1000, 0x7f, 0x20, 0x400, 0x40, 0x30000, 0x7fff, 0x80000000, 0x7e2, 0x400, 0x67, 0x3f, 0x2, 0x9ad0, 0x3, 0x0, 0x401, 0x9, 0x9, 0x0, 0x7ea, 0x9, 0x7, 0x5, 0x4, 0x7, 0x40000, 0x2, 0x7fff, 0xff, 0xfffffff8, 0x0, 0x7, 0x7fff, 0x0, 0xea65, 0x1b00bf7d, 0x7, 0x8, 0x0, 0x9, 0x71, 0x7, 0xffffffff, 0x9, 0x4b, 0x0, 0x1ff, 0x7fff, 0x81, 0x78, 0x1, 0x3, 0xad25, 0x6, 0x9, 0xc0, 0x0, 0x8, 0xf5f, 0x10001, 0x7, 0x6, 0x9, 0x825, 0xffffffff, 0x475, 0x81, 0x6, 0x6, 0x40, 0x3, 0x139, 0x800, 0x0, 0x7f, 0x6, 0x71c, 0x4, 0x6, 0x3, 0x7, 0x8001, 0x7fff, 0x9, 0x8, 0x0, 0x31f, 0x0, 0xfb3, 0x45, 0x7, 0x487fd237, 0x5, 0x8001, 0x10000, 0x3, 0xa6, 0x20, 0x401, 0x5, 0x2, 0x100, 0x29, 0x4, 0x100, 0x4, 0x4, 0x8, 0x5, 0x122, 0x7fff, 0x100, 0x1f, 0x4, 0xffff, 0x1, 0x8c3, 0xfffffffc, 0x8000, 0x80, 0x80000000, 0x9, 0x1ff, 0x0, 0x1000, 0x6, 0xef3c, 0x100, 0x1, 0x0, 0x81, 0x3f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x938, 0x9, 0xa01, 0xfffff000, 0x6, 0x88, 0x4, 0x8, 0x384e, 0xc66, 0x0, 0x1000, 0x4, 0x0, 0x53, 0xffffffff, 0x9, 0xffff, 0x81, 0x9, 0x401, 0x9, 0x8001, 0x1, 0x1f, 0x3, 0x1618, 0x8001, 0x85, 0xfffffbff, 0x3, 0x8, 0x3, 0x0, 0xfffffffb, 0x80, 0x7, 0x7, 0x1, 0x7, 0x4b8e, 0x40000000, 0x8000, 0x400, 0x8, 0x4, 0x8, 0x401, 0x434, 0x2, 0x6, 0x9, 0x719e, 0x1, 0x4, 0x80, 0x9, 0x3, 0x0, 0x7, 0xd73, 0x15, 0x84000000, 0x1f, 0x200, 0x7, 0x9, 0x9dba, 0x9, 0xffffff7f, 0x2, 0x3, 0x5, 0x3ff, 0x7d78, 0x101, 0xfffffffe, 0x9, 0x4, 0x6, 0x6, 0x4, 0x5, 0x66c, 0xfff, 0x8, 0x3ff, 0x40, 0x2, 0x38, 0x1ff, 0x3, 0x400, 0x1, 0xffffffef, 0x8, 0x10000, 0x8, 0x8, 0xffffffff, 0xfffffff9, 0xfffffff7, 0x1f, 0x8001, 0x10001, 0x3f, 0x2, 0x401, 0x5, 0x8, 0x809, 0xd4, 0x2, 0x0, 0x20, 0x100, 0x7ff, 0x3f, 0x34b2, 0xff, 0x0, 0x3, 0x0, 0xfffffffd, 0x6, 0x1e9, 0x10001, 0x5, 0xa0a, 0x0, 0x8, 0x4, 0x3f, 0x3, 0x7, 0x9, 0x1, 0xbdf, 0x0, 0xfff, 0x4, 0x2, 0x0, 0x8, 0x1, 0x0, 0xd3f2, 0x4, 0x3, 0x8, 0x9, 0x9, 0x6, 0x52, 0x9, 0x101, 0x8c, 0x6, 0x7ff, 0x4, 0x2, 0x32eb, 0x514f0d15, 0xe58, 0x8, 0x0, 0x9, 0x1, 0x3, 0xffffffff, 0x95b, 0x4, 0x0, 0x46, 0x6, 0x7, 0x8, 0xfffff800, 0xfffffffb, 0x1, 0x9, 0x0, 0xc109, 0x0, 0x0, 0x1ff, 0x80000, 0x7f, 0x2, 0x5, 0x3, 0x1, 0x5, 0x7, 0x236, 0x0, 0x6, 0x2, 0x9087, 0x2, 0x4, 0x6, 0x9, 0x5, 0x1, 0x0, 0x10001, 0x4, 0x3, 0x1, 0x8, 0x7ff, 0x1, 0x8, 0x401, 0x7, 0x4, 0xff, 0x6, 0xc1, 0x1ff, 0x3f, 0xffff, 0x7, 0xfcb, 0x1000, 0x8000, 0x5cd621b1, 0x3ff, 0xfffffffb, 0x5, 0x9, 0x7fff, 0x1, 0x5, 0x2, 0x3f80000, 0xa4, 0xd, 0x5, 0x9, 0x91e, 0x0, 0x2, 0xfff, 0x9, 0x0, 0x6, 0x1000, 0x3, 0x100, 0xe38, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa5}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x748}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x8a4, 0x2, [@TCA_FW_POLICE={0x898, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x7, 0xf, 0x5, 0xffffff81, {0x1, 0x2, 0x0, 0x7, 0x8001, 0xfffffff9}, {0x0, 0x2, 0x7480, 0x1000, 0x6, 0x1}, 0x10001, 0xa8, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x667, 0x5, 0x6, 0x2, 0xfffffffb, {0x1, 0x2, 0xff7f, 0x200, 0x401, 0xc3}, {0x4, 0x0, 0xffff, 0x9, 0x1, 0x3}, 0x80000000, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x7fff, 0x5, 0x1, 0x6, 0x400, 0x80, 0xfffffc01, 0x9, 0xffffffff, 0x7, 0x100, 0x7fff, 0x74, 0x2, 0x1, 0x1, 0x8, 0x800000, 0x401, 0x5, 0x9, 0xc26, 0x5, 0x9, 0x3, 0x5, 0x81, 0x8, 0x7, 0x8, 0x9, 0x20, 0x9, 0x0, 0x0, 0x14c04875, 0x4, 0xfffeffff, 0x4, 0x6, 0x81, 0x7a4, 0x0, 0x6, 0x6, 0x100, 0x7e3, 0x22, 0xfff, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x2, 0x7, 0x20, 0x12, 0x2, 0x7fffffff, 0xce4, 0x101, 0x9, 0x9, 0x3, 0x80000000, 0x6, 0x5, 0x7, 0x8000, 0x7ff, 0x8, 0x5860, 0x9, 0xffffb503, 0x7, 0x10001, 0xfffffffe, 0x4c4, 0xfffffffe, 0x10001, 0x4, 0xa, 0x0, 0x4, 0x20, 0xffffffff, 0x6, 0x7, 0x400, 0x7, 0x81, 0x7, 0x6, 0x8000, 0x0, 0x4e, 0x26, 0x7, 0xfff, 0x3, 0x0, 0x7, 0x0, 0xbac, 0x1, 0x0, 0x9, 0xffff, 0x100, 0x3, 0xea9, 0xc61, 0x1, 0x3f, 0x1, 0xfffffffe, 0x0, 0x15, 0x7fffffff, 0x1, 0x10001, 0x7, 0x6198, 0x1041, 0x1f, 0x6b7, 0x40, 0x8001, 0x0, 0x401, 0x3f, 0x6, 0x503, 0x8000, 0x6, 0x4, 0xc1, 0xfffffffa, 0x8000, 0x7, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x1f, 0xfffffffc, 0x8001, 0x9, 0x80000000, 0xd6d5, 0x7, 0x6, 0x1, 0x9, 0x80000000, 0x3, 0x6, 0x2, 0xfffffffe, 0x7, 0x7ff, 0x2, 0x1540, 0xc000000, 0x4, 0x6, 0x80, 0x20, 0xff, 0x6, 0x7ff, 0x8, 0x0, 0x8, 0x3, 0x1, 0x5, 0x3f, 0x4, 0x5, 0x58, 0xfffffffd, 0xa9, 0x1, 0x12, 0xffffffff, 0x401, 0x1, 0x3ff, 0x10001, 0x44, 0xfb4, 0x2053, 0x0, 0x0, 0x3ff, 0x2, 0xffff, 0xffffffff, 0xfff, 0x4, 0x7b, 0x1, 0x40, 0xffff1bad, 0x0, 0x7, 0x849, 0x0, 0x6, 0x1000, 0x0, 0x4, 0x0, 0x8be6, 0x5, 0x1, 0x8001, 0x2800, 0x3, 0xcc, 0x0, 0xd7, 0x7fffffff, 0x101, 0x9, 0x6, 0x7, 0x0, 0x8, 0x56d, 0x10001, 0xfffffff7, 0x4, 0x5, 0x8, 0x88, 0x7f, 0x3217, 0x9, 0x100, 0x8, 0x76, 0xdb, 0x6, 0x9, 0x8, 0x1, 0x400, 0xb081, 0x7, 0x8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x7, 0x0, 0x10001, 0x3, 0xc245, 0x8, 0x400, 0x0, 0x8001, 0x1e, 0x7, 0x4, 0x6, 0x2, 0xfffffff7, 0x9, 0x80000000, 0x7ff, 0x6, 0x6, 0x6, 0x102, 0x2, 0x4, 0x2, 0x13, 0x8000, 0x9, 0x6, 0x7fffffff, 0x0, 0x2, 0x400, 0x7f6e, 0x7, 0x40, 0x443d, 0x8, 0x1, 0x3, 0x6, 0x81, 0x1d13, 0x5, 0x9, 0x6, 0x3, 0x2, 0x1, 0x9, 0x0, 0x728, 0x6, 0x8000, 0x4, 0x4, 0x4, 0x6, 0x5, 0x7ff, 0x4, 0xab, 0x48b2, 0x22, 0x2, 0xfffffffa, 0x1ae53234, 0x3, 0x80000000, 0x2, 0x1000, 0x1f, 0x2, 0x9, 0x1000, 0x80000001, 0x1f, 0x47b, 0xfff, 0x3, 0x3c, 0x7, 0x1, 0xfffffff7, 0x6a, 0x6, 0x40000000, 0x8001, 0x9, 0x22, 0x8, 0x6, 0x0, 0x3ff, 0x55, 0x5, 0xb8, 0xa367, 0x3, 0x1, 0x72f0c9e3, 0x566, 0x1, 0x2, 0x100, 0x6, 0x8001, 0xffff, 0x1b1c, 0xf5, 0x10000, 0x9, 0xc6, 0x5, 0x7, 0xffffffff, 0x2f, 0xd4, 0x1, 0x6e36, 0x25, 0x0, 0x1000, 0x7, 0x4, 0x1000, 0x6, 0x8ec1, 0x6, 0x5b24, 0x3, 0x1, 0xffffffff, 0x20, 0x5, 0x1000, 0x6, 0x3, 0x74, 0x9, 0x3, 0x8, 0x101, 0x9, 0x9, 0x4, 0x2467f8a2, 0x90, 0x3, 0x7, 0x80000001, 0x2, 0x9, 0x7, 0x0, 0x7, 0x7fffffff, 0xffffffff, 0x2, 0x2, 0x7, 0x763, 0x7fff, 0x3, 0xe31, 0x3, 0x8, 0x0, 0x3b, 0x100, 0x4, 0x0, 0x474, 0x80000000, 0x5, 0x7f, 0x3, 0x7f, 0x7, 0x6, 0x6bc, 0x7, 0x9, 0x1, 0x3, 0x2, 0x1f, 0xa000, 0x9, 0x81, 0x5, 0x6, 0xfffffffa, 0x1, 0x0, 0x3, 0x100, 0x71, 0x1, 0x5, 0x1f, 0x80000001, 0xa483, 0xd086, 0x80, 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x400, 0x0, 0x1d22, 0x4, 0x6e6, 0xc6, 0xffc000, 0x1, 0x3, 0xfff, 0x8001, 0x2, 0x6, 0x5, 0x8, 0x7, 0x8001, 0xffff, 0x6, 0xeca, 0x4, 0x0, 0x8, 0x800, 0x7298, 0xfffffffe, 0x4, 0x0, 0xfffffff9, 0x5, 0x7f, 0xfff, 0x7fff, 0x101, 0xa5, 0x200, 0x8, 0x1, 0x7, 0x48000000, 0x81, 0x4, 0xc942]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x40, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xce}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2c}}]}, 0x1198}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01000000006bcb72069f00"], 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf257c0000000c00990035000000030000000a00060008021100000100000a00060008021100000000000a0006000802a2bb355bb7116ffd0600ffffffffffff00000a00060008021100000100002c00060008bf3992f8c0dc143560021100000000000a00060008021100000100000a0006c831d43403d7eb64cbc216fe6403308110d83a39b110dbaff6b84f9c778975946f74236d5e102e63e5332de3a6146b0788b5faea5d15191720ac786fc633165c42df0674cf841a1bfbda37bee05683a5f8e2e4a68f313d55f1162ea7120ffccc9f70243f5c2e2b07db205a01a66c2c1b748cff64709186ce3b1365de94e8abbfd11a1bda1369ab9454bde7a9a1425aa401e4e3841d89cc475988ce15b6d9ad118073aebcb989e20b"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) 18:27:14 executing program 3: add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="d3289b968e7eaad5335a90c8da7a082e79817f85a928720f2f539e501b47af5036171b5df46768ad03023d5dba50c0fd436ae46156a0600cea44384bd8ebec7d506e9e282868467fb00c32547ee815b18ce191d8ff8c0e86416a1c2f706826b738cec28752afbbb917aeb098487a28391e47ce9d15b141933f8059d41c098150eed46350067df2d2e45cf037dd1c1057e6c0adbb7040b3c4b6cd58ced13653533ca459ad704d258a159411d6a73db1f4cff2818c352b2585f318b4c936fdd2ad84b318a18fe1c411a319e229ce74e9d4d4574b1b5a14dffdcbadf3bca4632a81cda1169a5a6dff5ad2ce032dc59c2d10b1a229c7c8", 0xf5, 0xffffffffffffffff) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x87) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x20, 0x3f}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x13c, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7d}, 0x7f, 0x2, @device_a, 0x0, 0x1, 0x7}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @peer_mgmt={0x75, 0x14, {0x1, 0x7, @void, @void, @val="36eaefaed1d41311100c92d636263c31"}}, @supported_rates={0x1, 0x3, [{}, {0xc, 0x1}, {0x12, 0x1}]}, @perr={0x84, 0xe3, {0x67, 0xf, [@not_ext={{}, @device_b, 0x7aa51e96, "", 0x41}, @ext={{}, @device_b, 0xea3, @device_b, 0x11}, @not_ext={{}, @broadcast, 0x2ff4c199, "", 0x33}, @not_ext={{}, @broadcast, 0x6, "", 0x24}, @not_ext={{}, @broadcast, 0x8, "", 0x36}, @ext={{}, @device_a, 0x3, @device_a, 0x36}, @not_ext={{}, @device_a, 0x81, "", 0x24}, @ext={{}, @broadcast, 0x800000, @device_b, 0x1}, @not_ext={{}, @device_a, 0x6, "", 0x23}, @ext={{}, @broadcast, 0xfffffffa, @device_b, 0x41}, @not_ext={{}, @device_a, 0x8, "", 0x31}, @not_ext={{}, @broadcast, 0x2, "", 0x2c}, @not_ext={{}, @device_b, 0x250c, "", 0x11}, @not_ext={{}, @broadcast, 0x7f, "", 0x1d}, @ext={{}, @device_a, 0x4, @device_b, 0x41}]}}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0xe0, 0x3f, 0x5}}, @dsss={0x3, 0x1, 0x9}]}, @NL80211_ATTR_IE={0x20e, 0x2a, [@fast_bss_trans={0x37, 0x92, {0x8c, 0x4, "57853b6a27d75f5049aa3d4b31bc95c1", "ce29874e6a5a68617ab6e3fdbb52f9c81b7bb2934331ee34b3632931403135bd", "fe79f0c80046768595c9fc422b928fa22893ca0ccb6b900e76d4f92a97e49231", [{0x3, 0xd, "44083782e568549e41e987b5b0"}, {0x3, 0xd, "bb0d9829ac8c5e4aa76b515cba"}, {0x3, 0xf, "d3727774be25d87c26e74857647da3"}, {0x4, 0xf, "397ce0746440bdf3787722dfd8b004"}]}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xdd, {0x53, 0x6, 0x3f, "41b4e7a533ef0b2cf456bad122501a76a522c53764b21f1cbd79e833927d1589aa48c5d045c61d1f6487143b2344929db347e6a7dd964dc34bd6c0ca7b17445f00c98288922a6e59f146676d9035336cb4fa1d558a18986459c631c5a2802511bf1662bb067ab5fa05e719b69b3dd1e9bcf2d8f09cbb2e1854ee62a442c9d9154ce603707aa66f830db2addaafbf089b6e5f125ed621208f527e8a4a351a44c9683819538485f70c7f632649a524b3419ed95f0f46aaf18dddb26937d4a8a8a23e1c9d6a498074b291226a330d25c742fd0d1dee89a263069fae"}}, @peer_mgmt={0x75, 0x14, {0xfffd, 0x1f, @void, @void, @val="179bfbfa93f8d35c67918c84c44932b3"}}, @ibss={0x6, 0x2, 0xd1}, @chsw_timing={0x68, 0x4, {0x100, 0x9}}, @preq={0x82, 0x62, @ext={{0x0, 0x1, 0x1}, 0x40, 0xfa, 0xffff8001, @device_b, 0x81, @device_b, 0xffffffff, 0x1000, 0x6, [{{}, @device_b, 0x2}, {{}, @device_a, 0xa2f}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x9f0}, {{0x0, 0x0, 0x1}, @broadcast}]}}, @challenge={0x10, 0x1, 0x1}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0xb3, 0x2a, [@random_vendor={0xdd, 0xaa, "d6d98eea868b4c02179f561dfe896deb8797cfa6efac4d6f7901a79089f25dd514742c2b923daa631e31ca0758aa38a763fcd3c4f35ec4275a443b6324b922114129af9d5122658d3226d336d0e1694ea4e934b80d13f6a8907fad51cdeddbb6462ed87841dccdcac83b022e3a6df3295bce0d6dbc850abbe811ff6eab5f4fa38dc05a6e6fc17402ef52b3098c8599a27160526190a339adaea3235251d45f75a7878da89d86ee1718df"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x20040040}, 0x4008004) 18:27:14 executing program 4: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0x24}}, 0x18) 18:27:14 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="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", 0xff, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000300)="d03bb8fd0d2862800258fb3c24e9b6284831286c70ecbca1d5cd41ce061b29aaa812eb0e703420ca22f6c79c06e214944f8eba3411a42f4a73e20304af700b4a9285fe940e99abe42a51b822e15f883cb246c1e03fc7917c4106d4a29ccc37776b48334ddce45647b17c57053c9ad33127c76a85929ea56209e0d0358f24648ae396b2bd8a92ee43e016a225cf59bab1a3e9b4dfa4fd67f3ac0cd361d7af5218154fa6b3056c802a68000000000000", 0xaf, r1) request_key(&(0x7f0000000500)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f00000003c0)='v\xa6\x83\x9c\x86s4\xae\x98u\x98\x10\xbd\xac\xf9\b\xb2\xfdh_\x9a\xd4\'\x9e\xe2\x86h\xee>z0I\xe4v\x06\xe1\'C\xe9f\xd2\xab\xb4\x9a\x97\x82\xb3k`\x02\xea\x9fW\x86\x18\xb9`\xa2\xb0|,SAT\xe1l\xe7\xed\a\xc3\xb0\x17+\xb7\x1fv\x80\xf3\x95\xe5\rp\xda`Eq\xc0\xa1\xd7z\xaf\xae\xe1\xad\xa0O\xf1\xe9\x1b\xcc%\x00\xeaI\xc0>m\xd7[\xb5\xfe\xd1\xf8\x9c\x01]|(`\x9d\x87Q\x89\xd9\xffm, I\xae\xc8s\xe8&\xdb\x94W\xa5\xed\xa8\xed\x03\x1e\xd1\xd8\x1b\x884\x12\"\xff*\xc06\xda\xea\xa9\x87\xca&\x9cD\xc6\xb90\xa8\xd6^\xf6\xd6\xfe(\x145E\x9f\x94\x82\xab\r&D\xdc\x8e\xb4\xa7\xa8\t\t\xba\xab$\xd2\x8eZE\xb9\xe5\xe2\x02\xd4^\x8f\xa5*\xae\x0f\x89W\xe50\x83\xde?\x9f\xfa\x17e\xb4y+vP\xcc', r3) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$link(0x8, r1, r0) 18:27:14 executing program 3: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0xf}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f0000000180)='@:!#\x00', 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r1, 0x1, r2) 18:27:14 executing program 5: add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x4f, 0xfffffffffffffffc) 18:27:14 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:14 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@netrom, @null, @default, @bcast, @bcast, @null, @rose, @default]}, &(0x7f0000000000)=0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x2}, @enter_looper, @acquire, @request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x1}, @register_looper, @acquire_done={0x40106309, 0x2}], 0xd, 0x0, &(0x7f00000001c0)="326a45388704d200160a1cdff9"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:14 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0xa, 0x3ff, 0x1, r2, 0x5, [], r0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x486080, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x9) 18:27:14 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000528}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newtclass={0x888, 0x28, 0x908, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe1, 0xffff}, {0x1, 0xfff1}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xef, 0x81}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x854, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3, 0x2, 0x7, 0x80, 0x7, 0xed, 0x1, 0xfff}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0xffffff00, 0x200, 0xde, 0x8, 0x200, 0x4f34, 0x2, 0xfffffc01, 0x7, 0x1, 0x7fff, 0x7fffffff, 0x7ff, 0x2, 0x5, 0xef2, 0x10001, 0xffffffff, 0x3ff, 0xfff, 0x2, 0x7f, 0x9, 0x7fff, 0x80000001, 0x6, 0x7, 0x9, 0x7, 0x7ff, 0x2, 0x9, 0x9d1b, 0x3ff, 0x20, 0x8000, 0x5, 0x1, 0x2, 0x80000000, 0x6dae, 0x401, 0x6, 0x1, 0xf4c0, 0x6, 0xffffffff, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x0, 0x3, 0x8, 0x204f972c, 0x2b50, 0x9, 0x4, 0x7, 0x1, 0x1f, 0x10001, 0x5, 0x5, 0x1793, 0x9, 0x5, 0x1f, 0x5, 0x9, 0x7fffffff, 0x10001, 0x2, 0x7, 0x2, 0x4, 0x101, 0xffffff00, 0x7fffffff, 0x0, 0x8001, 0x5, 0x0, 0x80, 0xfff, 0xfffff786, 0x958c, 0x10000, 0x59a, 0xfffffff9, 0x3, 0x6, 0x2, 0x16e, 0xffffffff, 0x8, 0x42800000, 0x3, 0x4, 0xfffffff7, 0xffffff80, 0x800, 0x1, 0x6, 0xf2f, 0x7fff, 0x9, 0xfffffffd, 0x0, 0x0, 0x9, 0xe4, 0x2, 0x3ff, 0x0, 0x900d, 0x20, 0x2, 0xc1, 0xd0, 0xe538, 0x7fff, 0x9, 0x12, 0x401, 0xc4, 0x65, 0xffff8001, 0x9, 0x65, 0xd4, 0x80000001, 0x9, 0xfffeffff, 0x3f, 0x0, 0x10001, 0xffffffff, 0x80, 0x81, 0x1c, 0x8f, 0x0, 0x5, 0x6, 0x5, 0x5, 0x1f, 0x1, 0x4e0a, 0x20, 0x2, 0x8, 0x2, 0x9, 0xddec, 0x5, 0x6, 0x4, 0x7fffffff, 0x3, 0x10000, 0x171c, 0x7fff, 0x1b, 0xffffffff, 0x7a, 0x2, 0x4, 0x1, 0x41, 0x3ff, 0x8, 0x4, 0x6, 0x886, 0x10001, 0xca, 0x5, 0x3, 0x0, 0x3, 0x2, 0x7, 0xad1, 0x7f, 0x3f, 0x3f, 0x1f, 0x9, 0xefd3, 0x401, 0x6, 0x9, 0x400, 0x8, 0x4, 0x4, 0x401, 0x4, 0x0, 0x1ff, 0x2fe, 0x80000000, 0xfff, 0xf6080000, 0x2, 0xffff, 0x80000001, 0x4, 0x3, 0x4, 0x5, 0x7fff, 0x9, 0x9, 0x0, 0x1, 0x41d1, 0x7, 0x80000000, 0x0, 0x20, 0x3, 0x48, 0x5, 0x81, 0x6, 0x6, 0x7fff, 0x3ff, 0x0, 0x3f, 0x0, 0x1, 0x80000000, 0x578, 0x0, 0x1, 0x20, 0x4, 0x4, 0x3, 0x1, 0x6, 0x5, 0x400, 0x3, 0x2a, 0x2, 0x5e9, 0x0, 0x9, 0x6, 0x8000]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x3}, 0x5, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x5}, 0xff, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0xfffffff9, 0x10001, 0x10001, 0x80000000, 0x74, 0x3f, 0x0, 0x1000, 0x80000001, 0x7, 0xfcd9, 0x4, 0x7, 0x1000, 0x80000001, 0x9, 0x3988, 0x8001, 0xa2be, 0x7f, 0xd8, 0x3, 0x9, 0x8, 0x8, 0x5, 0x3d, 0x8, 0x3f, 0x8001, 0x5, 0x9, 0xe7, 0x3ff, 0x7, 0x80, 0x7fff, 0x6, 0x2, 0x1f, 0x8, 0x3f, 0x0, 0x3e6, 0x6, 0x2, 0x0, 0x7, 0x2, 0x8, 0x8661, 0x5cc5, 0xff, 0x9, 0x7, 0x0, 0x80, 0x80000000, 0x7ff, 0x81, 0x400, 0x8, 0x6, 0x80000001, 0x800, 0x102, 0x9, 0x5, 0x0, 0xffff, 0xff, 0x81, 0x9, 0x7, 0x0, 0xffff, 0x1, 0x101, 0xffffffff, 0x1, 0xaa9, 0xfffffffc, 0x481f, 0x2, 0x0, 0x0, 0x0, 0x3, 0x9, 0x9, 0x7f38eb4b, 0x3ac5, 0xfffffffa, 0x2, 0x5, 0xc85, 0x9, 0x96, 0x9, 0x4, 0x0, 0x3, 0x7, 0x1000, 0x8b95, 0x3, 0xdbf, 0x2, 0x200, 0x32, 0x9, 0x740, 0x400, 0x5, 0xbe68, 0x6, 0x0, 0xcf8, 0x3, 0x90, 0x3, 0xb4f, 0xe5c, 0x5, 0xffffb0ed, 0x2400, 0x4, 0x81, 0x9, 0x1b, 0x8, 0x81, 0x3, 0xdd, 0x7, 0x800, 0x2, 0x8, 0x0, 0x80000001, 0x7f, 0x1, 0x9, 0x2, 0x3, 0x3, 0x9, 0x400, 0x1, 0x876d, 0x6bd, 0x3ff, 0x2, 0x2, 0x101, 0xfffffff9, 0x0, 0xb7d, 0x3, 0x6, 0x0, 0x9, 0x20, 0x5afec03a, 0xffffffff, 0x10000, 0x1, 0x3f, 0x5, 0x1f800, 0x5, 0x8, 0x1, 0x8, 0x5, 0x7, 0x2, 0x9f0, 0x7, 0x9, 0x1f, 0x3f, 0xb254, 0x6, 0xffff, 0x3ff, 0x5, 0xc8b4, 0x8, 0x7, 0x1, 0x0, 0x7, 0xfff, 0x8, 0x5, 0x10000, 0x2, 0x0, 0x400, 0xb47, 0x8, 0x80000000, 0x8bb, 0x65, 0x40, 0x1, 0x8, 0x80, 0x9, 0x2, 0x1801, 0x0, 0xffffffff, 0x2a000000, 0x1, 0x401, 0x8001, 0x0, 0x4, 0x6b7, 0x2, 0x1ff, 0x0, 0x8, 0x1, 0x4, 0x1, 0x0, 0x3, 0x2, 0xbbfa, 0x7, 0x1, 0x5ad, 0x8, 0x1, 0x3, 0x4, 0x8, 0x0, 0x1, 0x0, 0x4, 0x80000000, 0x1, 0x3, 0x8, 0x8, 0x58, 0x40, 0x9, 0x7, 0x80000001, 0xef]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x81, 0x0, 0x9, 0x1, 0xc88, 0x10000}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x337c0b7eb487a01}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') getpid() sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x2c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000000) waitid(0x0, r0, &(0x7f0000000180), 0x8, &(0x7f0000000200)) 18:27:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x2004c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) getsockname(r2, &(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @rose, @default, @netrom, @default, @null, @netrom]}, &(0x7f0000000200)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x80}, @NL80211_ATTR_IE={0x6a, 0x2a, [@random_vendor={0xdd, 0x1f, "ef9af56f1a91024a8a2b5f21a76e44cd9546e7ac3dd0d3cfcb61b9c674c8e1"}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0x6, 0x8, 0x0, 0x2e7, 0x0, 0x1}, 0xc2734b1950185ee1, 0x0, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x40, 0x6, @device_a, 0x9, 0x5, 0xffffffff}}, @dsss={0x3, 0x1, 0xab}, @cf={0x4, 0x6, {0x9, 0x1, 0xfe, 0x934e}}, @supported_rates={0x1, 0x5, [{0x36}, {0x12, 0x1}, {0x4, 0x1}, {0x1}, {0x9}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14d302, 0x0) 18:27:14 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0xa, 0x3ff, 0x1, r2, 0x5, [], r0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:14 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x8001) 18:27:15 executing program 5: r0 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="a5b56d87513e4f6a86b3b78792b92eafd6499d3a39a4e4bd97222a6ad98fa18502923a9f8906e96cfe815b4cc33c40dce621ad83d5825cd25e8c896c469a5a7a43b66b5b618531297a274d2b7a585628cab677f8deaff3d11cfa0cc79198439d0e8d678c513ddb050204364595cd07ba92096255fc99f024022cf66aee66aed1be7d6c143a826099581af9727487213424f979dcad724de18bbeae3d21925c7792527a5c3585e8", 0xa7, 0xfffffffffffffff8) socketpair(0x28, 0x4, 0x3f, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf255c0000000000008f3437131ea7a9ca23b60000000300"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, r0) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0xa, 0x3ff, 0x1, r2, 0x5, [], r0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0xfc) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) write$sequencer(r1, &(0x7f0000000000)=[@l={0x92, 0xe, 0x0, 0x2, 0x9, 0x8, 0x80}, @t={0xc1, 0x1, 0x5, 0x1f}, @l={0x92, 0x1, 0xb0, 0xf, 0x6, 0x3, 0x54b}, @v={0x93, 0x0, 0x80, 0x1f, @generic=0x2}, @x={0x94, 0x6, "854bbf387311"}, @n={0x4a6c41655cff93a8, 0x9, @generic=0x4, 0x1}], 0x2c) 18:27:15 executing program 2: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x6) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x15d602, 0x0) 18:27:15 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@null, @remote, @remote, @rose, @remote, @bcast, @netrom, @null]}, &(0x7f0000000000)=0x48) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0xa, 0x3ff, 0x1, r2, 0x5, [], r0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3e5480, 0x0) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0xa, 0x3ff, 0x1, r2, 0x5, [], r0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) 18:27:15 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x8}, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0xff9}, 0x0, &(0x7f00000000c0), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:15 executing program 5: r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140), 0x4) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x3}) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x17, 0x20, 0x6e, 0x5f, 0x890, 0xffffffffffffffff, 0x2, [], r0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x40) 18:27:15 executing program 4: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) r0 = getpgrp(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x109000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaa, 0xf}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x66}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}}, 0x24000810) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000200)=0x2) getpgrp(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r5 = gettid() waitid(0x1, r5, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) 18:27:15 executing program 5: add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01012bbddf255c00000008006b00be000008006b00000000ed076b003c0000000000949b78cd4b34e0acc95ebec8ea1214a43033fa2c2d5b087a8ae19b5b9b238348d98c12c8ff92d53c8a0c4424563a9dc87d11c30ea5a7bb6395fe8a6a48a23cf220b84cbc927f45e2090ed6b5fc15e030e151073e00000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000000) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x145702, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101040, 0x0) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 5: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 18:27:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, r3, r2, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x70b003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x10001, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000340)=0x1040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x60}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3f}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000040}, 0x40081) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x10000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000100)={0x3f1de6a2, 0x9, 0x80000000}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000002c0)={0x68, 0x3ff, 0x1}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(r3, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x20, 0x360, 0x3c00, 0x10, 0x5, 0x5, 0x0, 0x1, {0x8001, 0x80000000}, {0xfffffff8, 0x40, 0x1}, {0x7, 0x7fffffff}, {0x8, 0xfffffff9}, 0x0, 0x40, 0x4, 0x89, 0x1, 0x81, 0x81, 0x4, 0x4, 0xb9, 0x0, 0x0, 0x12, 0x1, 0x0, 0xb}) getpid() 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 5: add_key(&(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x21, 0xfffffffffffffffd) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x1000) 18:27:15 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x3000}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x5}) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:15 executing program 5: add_key(&(0x7f0000000080)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:15 executing program 5: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0xb, 0xfffffffffffffffd) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x7f, 0x7f, &(0x7f0000000040)=0x217}) 18:27:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x7fffffff) 18:27:15 executing program 5: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) 18:27:15 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r2, &(0x7f0000002080)={0x20, 0x0, r3}, 0x20) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0xffffffffffffffda, r3, {{0x2, 0x0, 0x81, 0x101, 0x1ff, 0x9, {0x5, 0x5, 0x6a8c, 0x1f, 0x1, 0xca, 0x3ff, 0x6, 0x3, 0x6000, 0xbd, 0x0, r4, 0x0, 0x1}}, {0x0, 0x1}}}, 0xa0) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x509100, 0x0) 18:27:15 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000002180)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50, 0xffffffffffffffda, r2, {0x7, 0x20, 0x80000000, 0x100008, 0x5, 0x0, 0x1f, 0x7ff}}, 0x50) 18:27:15 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x86f68d52a74dd879, 0x0) eventfd(0x8000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) 18:27:15 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$negate(0xd, r2, 0x0, r3) socket$inet6_udp(0xa, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x101000, 0x0) keyctl$link(0x8, r1, r2) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 18:27:15 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) 18:27:15 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x12000, 0x0) r1 = userfaultfd(0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000100)={0x18f, 0x9, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000001c0)={0x11d4, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x99d2}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x81}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10c8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, "a8ce8aab0843e792c54a281de8256df5239e59f7bbdd852baae2168dd87f443e7fe9048f45c8b1fe6ec7641eb390cad4aa88e42013f0fff01c4b3d85f424cf333ad39921de1a84f385c437d603fe16c14da31a288dde5b0c"}, @NL80211_BAND_5GHZ={0x61, 0x1, "b0e4449d1597398612059ca4a572baeabf0d62f08ba9d9c07969516c91fdc4a9616ea90b6b9fb25a72ffba8e929809d0c6ed2a4212b17ac94f9fe543695ab1bcdaeb23648f5f440e0db939f9eaa43caf58fdc3c7e4d444e10794a2040b"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7701}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xe0000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2e}]}, @NL80211_ATTR_IE={0x66, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x0, 0x41, 0xffff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x40, 0x74, 0xff}}, @challenge={0x10, 0x1, 0x64}, @prep={0x83, 0x1f, @not_ext={{}, 0xff, 0x83, @broadcast, 0x0, "", 0x7f, 0x1, @device_a, 0x800}}, @challenge={0x10, 0x1, 0x71}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf9, 0x30, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x70, 0x8}}, @chsw_timing={0x68, 0x4, {0xf7, 0x8001}}, @mic={0x8c, 0x10, {0x4ce, "a0b08f4f784f", @short="c1c1d4e53458b97d"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x6, @val, @val=0xe, @void}}]}]}, 0x11d4}}, 0x20000000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000001440)=0x3) waitid(0x1, 0x0, &(0x7f0000001480), 0x1, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) 18:27:15 executing program 2: ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:15 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7fff}}, 0x18) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x7, 0x49, &(0x7f0000000040)=0x1}) 18:27:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000200)={&(0x7f0000000780), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void}}}, 0xffffffffffffff60}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x15d700, 0x0) 18:27:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4540, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x8000, 0x2, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="db12afd9d4f72dbb8b858082213b35e5b14e14ef62101daf84b8cbfea8e869397ef42262c9aee4dcb5ea35f34109884d2d1a93b3ed1da3bc0d2eebc20929a33e28559e8010f83f4959f3e25ee7e6c059c6cef3b9", @ANYBLOB, @ANYBLOB="0100000000000000000070000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000240)) 18:27:15 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:15 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) geteuid() r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x963e, 0x4) 18:27:15 executing program 5: r0 = add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)="00aad4dc99e7b2697d0ab8b93680ee479d665d93e21c382ca1b10605e5b07086456c9e4bf5883bf9ee5628682520ceb275e58dbe71f5c6e3952baa3b694cd9bdd4fa08fb3c000d18bd33578dcab46a131fcbed346c05782855d3eafe3306b466bdf88e9bd453b008d0ecf4e0226bb17e793cf09f9772fc6227a95c31eb4029c894d4", 0x82, r0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x1, 0x2}) 18:27:15 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x1) 18:27:16 executing program 2: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x8, 0x5, 0x1}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000, 0x0) 18:27:16 executing program 5: add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 18:27:16 executing program 5: ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x1, @bcast, @bpq0='bpq0\x00', 0x7ff, 'syz0\x00', @bcast, 0xfffffffa, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200, 0x0) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 2: socketpair(0x2a, 0x1c9547deb5d65756, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r1) getpgrp(r1) 18:27:16 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x50f602, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x434040) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x10000) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000100)=0x5) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa8240, 0x0) 18:27:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x171000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xcc542, 0x0) 18:27:16 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000005fe030014000014000500fe880000000000000000000000000001a724"], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x48080) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 18:27:16 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:16 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001840)='/dev/ocfs2_control\x00', 0x10000, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000001880)=0x20, &(0x7f00000018c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 18:27:16 executing program 5: r0 = add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000080)={0x1000, 0x4000}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x101001, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000100)) keyctl$clear(0x7, r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xfffffff9}, 0x8) 18:27:16 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) socketpair(0xa, 0x800, 0xe8, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x44000) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x420080, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={r1, 0x200, 0x0, r2}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 18:27:16 executing program 5: ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x0) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4000, 0x0) 18:27:16 executing program 5: r0 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='wlan0\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, 0x0, 0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000900)=@bridge_getlink={0x320, 0x12, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x4121, 0x5}, [@IFLA_VFINFO_LIST={0x300, 0x16, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xc44}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6e, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0xbca, 0x331, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x9}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x4}}]}, {0xd0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x1bf, 0x3}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x5ad, 0xffff, 0x8100}}, {0x14, 0x1, {0x1, 0x251, 0xad, 0x88a8}}, {0x14, 0x1, {0xdd8, 0xed7, 0x7, 0x8100}}, {0x14, 0x1, {0x9, 0xb57, 0x0, 0x8100}}, {0x14, 0x1, {0x100, 0xd5b, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffff1d, 0x791, 0x1, 0x8100}}, {0x14, 0x1, {0x8001, 0x588, 0x0, 0x8100}}, {0x14, 0x1, {0x6, 0x2d, 0x3ff, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x800}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x401}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xcc, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffff001, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xa8e, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x29}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @local}}]}, {0xe0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1f, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xd7d, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x800, 0xbc6, 0x3, 0x8100}}, {0x14, 0x1, {0xffffffff, 0xcc3, 0x1f, 0x8100}}, {0x14, 0x1, {0x5, 0x27e, 0xfffffffa, 0x8100}}, {0x14, 0x1, {0x1000, 0xb0b, 0x8, 0x8100}}, {0x14, 0x1, {0x20, 0x1b8, 0x0, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x10001, 0xd9f, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @dev={[], 0x19}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x20, 0x80000001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xad1}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb72e, 0x81}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x20000000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0xebd8, 0x3f}}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9448bab1b80a25e0840e17bdb4a3d65ccf40548fdda19d343e59540700d882593bbaaf7452e583c34d62aedab916e3d137c1256a6096e54be465b0466adf9282879bd46bdab3f56ab45f38d89c5591ac12d94d614fdfdc8775756bc739e107c7e0895aee9380ef0233ac7a87d05243f50d5e8d39bdced06f650c546efd79988540c591fc028706b02d20ce3fce102f42575b1a4ed87acf4b432b3192b4559a18a41b198bdb4927086d33959fc71b", @ANYRES16=0x0, @ANYBLOB="04002bbd7000710d00002b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) 18:27:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getsockname(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000080)=0x80) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x814700, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x2}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) write$sequencer(r0, &(0x7f0000000080), 0x0) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:16 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r2, {{0x3, 0x8, 0x1}}}, 0x28) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0, 0xfffffffffffffffe) 18:27:16 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000540)={{0x3, @null}, [@netrom, @rose, @null, @netrom, @remote, @default, @null, @null]}, &(0x7f00000005c0)=0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2cc, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0x21, 0x45, "225134cc0c62d5f6057c531536ce8c69db3ad592052077574f7326879f"}, @NL80211_ATTR_TESTDATA={0xca, 0x45, "04d0d6f45a5deca68ffbcd38b1369b49d756aa36568a523aee175dac260d00b3711df58ac94be97b8a41ae5b7b09b13272b9d4e6092d31334fb1531e040d804873848da38135f0a9ee742b2e0f88ddf5b52c7715affe956237f7a46369acbf3b6df611b39e8a2f237502a5cddc63421bb722f6bf226f74557eb5dc95aa5f82ce2b5bcb1ffd1d7ae834506add34ff3af169b6b5f3f58f14a2f3e38e5d14d72e24c810357b77178a89a4ae50a2455a77bb3253617c93750690db5c670c1e6f468e92636cfb136b"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0xac, 0x45, "cbf6256b6a7bd2403401f0941712c10471997559da652f2aff359b895c8f95211beee85e4958d2ca99cb9f9a94b26ca3083e0f8257ffac34145865c5b524813d68845822562838be877c4a24abf972c7c2396ca9ca3709c2f79ed63245def0e57e6379c14bd4b5f469477f68d895bf579aad4b69a6ac70e80d69cfcfaf1be3ad060fd29e7593d915c370b1920b1e00327f25e9b922c2a3bde879bb71cee753c765a63843d1195710"}, @NL80211_ATTR_TESTDATA={0x29, 0x45, "763ca8fa237b6746b612d942ef4aab08b9c5a888e16bc68c30c8bded371f28c4f2870666b3"}, @NL80211_ATTR_TESTDATA={0xdf, 0x45, "ec64d08176cf6ccb0eaacc4068614a48c0fce468c59f8ef76ad6931534400807fe1e1107f1f20a1b2af21d1361ae16099e9334c2001771159d059ffdd9c76441a6d554d4c8e39c361a990f56128fb25e8e79773162a1655c777fbcee25444d691d2bacb9cfcb00a69de2ed5fb23746e7f9c241d38cd475df87e08f54c29b936b92f731c01fc5218491c1fc2d65c55f0015c1286712ea53ba7469f614610b8481d222ba3d6a9adfcff1fcbe902e4ba57e92352195b4ebbaa2606dbe44058fa74d74a74cdbe374ab68d5b03cf411d900690f86bc243f0548522ff222"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x40000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000040)=0x7) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0, 0xfffffffffffffffe) 18:27:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1140, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x5f}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "c286ca35"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xda3b}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf800}], @NL80211_ATTR_IE={0x103, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x6}}, @measure_req={0x26, 0xf7, {0x20, 0x3, 0xdd, "3654c868f52aa6d26566737ea45010bc379f53644f1a140ea5fc45ab854da12a4024bde5fb05b4b6e0e40911f45a83535e6e3462533b8b914b98a25a7267d8c0620505907af2629959a1d652b69b6ffefb63d4e4825b4bf23e371416104e7767117bec4ce7a1fa793abf7c4ac6d5802f52f079b56754b8f7f18bc6e222abd045ca3854528f6838e5dfcd4bcf6f4f900599a4dab0fa7a96fa2f6e931d2455b2d67ae76a0616b4f99290e68a15644431141b97dba0bdb466ca15bcb45e057ba5680705ee7405d754cced4415f2de88b4b76c10938451dcbd6f5ef16fb15a0bf0944cf7759fe463e0a20a6b7549a6266a4fd4efe607"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "fe5d6edf9320edc4d46d8c14cd11e148a846121ca4d2effb1337ad675ce37e3129646f19daab2c88b932d186f20ee8fab9587f2e3171e1672d9911c5ad213a3df2e98a9d14a30e16110f01e96fd3ee31466f776c3d858cf2bf0536d007d512b247ea0b3af9a21e4198de5d13672fcbc1a54c622a16a5b4b4b4e2148d36630ae397b8e3e551d3cb4fe16bab9415a85b31588d0a192819c9b12f48335a011329abb3e509c85b8eee8544babc58cc253be8d9fcc16cf25c06c1d6fb1b2c1db62b8b158de2b5092d039d0022885de966499498ed9bd8ffe3d097c0ec26fdd519023d01918492afbc761f4c7b5d53b0eb78694609e6c753207cb3a766752ed6e28ac80f37de313850f5cd7c40ff7ab5a922ae0dc614de828f8606482e1538d77dbe0fc4696ef9646658ba31859ec63a259284f1464d6ed9a4d0cde71e818385dff96ceb6f99e1320d2015e92f84b2f2b2b038469e614c57e22c753ad6bce973af3464171064aec005ed811d65d89c367a54b60257a643da4c076d5baded0310addb500f4777a24ed48aafba6899f5713f74fe3e1b0b415486361e8a6dfcf72cb702cd98314d6d1e2eaa44a392e18dfcd866df4722e3042b2f7370e08facfa90e13c4b375164d3e8dfa9ed62d17456eb9901f16195bd35a582e26bf1b81a79e8af486c3f6932651053366000f9d206ca21e9718c91961e37896d7099e2768cc243089cbef8df60afbe269368a1f9051461f8ee0d414bfac914f0b281e30a15376a072729b32f1be371038cde9cfa037ced709c987820da0af8eaa996eff5fcb7a9d6ec8fe1da9a664e43b530c7c18beffa28a09355bf6dd118140a3c2160c9b0ee38af95b57ef56d45a700e3c6eb8afb55f7dcaa2a2d0880b00101b8cbcc3480b5ac7d1b727181ee06d4c1a02d33e011f9a794a88e75a9132f3bb748cb2d4617ab7c67e8c9b820e5639d482e8b566cca1be9493d109d8af2aa216949d963e8620e8aadc9525cdca74a700c4f3ea314295ba2e198997b7b789c945dd0775eaab9f57d98aa447b0e0971d2c4d69d4d2f2143e0a1f94a825b7fda0466a83454d31af4cd9c56955af1ad250eb12a553b43b2fd2ce2997f65d2bcb67ffd8e83cd16bc40ec0d7ceff65427ccb1f0d50940f47c81ffa014c48b2ffeb409c478049ad01d7f2a712d1c0bcf9780173625f342a5e72f121df676a92dbae201ea1ca6f5976e79c237d77187f8bec6e5904b3c9b1672d29c4576a9930084f44cef2ef9ffc207b965bb461823926ed96a33875691065912399dc369e04a25bed4bce021b1b8bf0a6692044270a8b6344525e7cd7e20f9c7e4c3054a16100211d8d71feb74ca1bfe7f005aa1bf5d90e02c3ecf21759963b7c58d0570953628aeb7ccb93d42b3c104acb129103cc94f034b4ec6696dd0e92ef4bcb4b586d0953f905c31d3947ae6231079d247b8a189291ea7f989c150ac80d314be3a9a85212096ef40d650cc24ee496433fe534db166a3e2cf03d9b9b0be314da339249cd70a38a3a9f08229a4c4ed3f09462a9c82351409bd4a0a65f206f1b603c43a425904f0b1199b8004e9f0ccd115d5d659ebe076698b15ab0af96668cf79226b500cae7966745651d3807af9c6f9a6c4777187802a8c29fc7baf7756fd3466f32e8b598301227c5249af30ffc97f9e03469969740583a1ada1b3e7aaf9e8c3b041c0ca3f824648962e0e31777a78833f8356aa11bb9d0a756f1f13db2a2a87aa400d91e2e4099b55f54f0f34e0ff77f2843dfd7057faed1d53ad699954409eb950f98bbb941af4b0847b6696dd856cd66b333288bee8883f5f95d06c4e8a6fd1ab4caa9368815c72245f372e9d661b1641cf922ce52ee4eb7928c6d0e1fdaf79cbea45c374592dad93ae2d57db921e482d0da9ce0e41f61fa46c8566e7898ca2aa76879bbc3e121e2459bfa2474b5db5e76768b51a0755de320216d266517ba8930f6bde05ed592b684ae573e4bf6f77931dbe9e4e70b44bcd547f1b0e8a85d5c32b7a4bf82f27fa19fbdae9831940368aaea290a8f465223a79c24df53f29ccbd299a5390ab79391b1b761f826b6fbb6e07a55b8bbee25e0901ab77ed230b84c377a29a40b49ccd7d2984cf21424e1a181978c4693b9aa2af0889adf84adfc2184212b95079aca6dd5e13fb9d97b0466f843fb1a2619814aa4c60299b279b7dd87d0b09a7a95d525b5d14d0c6ef4acd628c78e86289f6f6d5db25c4340efc523ff0875fe6227097ad7ed478f9f13a79c9ce36948addc7fd97c2a3e90b9118eedd6d9e06ffe2d57106c77dfe382e422d2bd3952f9446ff62cba52dd36181e6e3d708fe57f6f1572202214b7a0664a4c85af9b34dad08c612db267c33171ee30b4f9d5562483ef3ddef9242be2555b52158f9408409433a8ced1fec90ed4854828f8e9f54aa4375690b2a459463cb1682b89e9f04dfa557833282834698a4d7c0c81c800ccfe10fb5df84fb717093e883f54bf7cd266ab1187df57f810488367ca5729c79e7e58de452df08532c974d255b81b6173df2274d59c5090de46147f1073ac4c1f7ebf8c723dbc3daa11f671ed3838ec7a7b21fcd726e393ffb4e998adbf36e5cf2fedfec45e41006c3ab00808f3d60df59d340c345161829b898ab8a73558acbae7e8e4c79fd58816f7867842110f55cee87213406d734cb89a800ed79d567fdb0f1b823c202d4ca3a7c9828b36934e386daddd14ac9f12d78b6de70b3a0bd28a7dbb65ac1097d58c635661119f96b64a33f5e974a74f82948b1f75f97df94fdc21b625fe5acc234dc4bfe3beaf744b95cff21a86b21fdabe5de74a992237ca5f139d1c0cd18f66805081c6bdd87bbcf7d842ddd095f9f09fcf568acae7097f0fc4e65ca1457df039b44bec12b4802446e4c07c85d152dfe9355630b4ef6d547c3b62c4369d0e48b78531db5f9ad964f7fda4902c8ce53b0feada42b96761dcf7c447f9df6f73e5a824a68b2a453b8d7988da18ff5ce920850a26d18c3a2f7b159067a1d225912b5c068df1b0fb3062d2d47923898da26f4a80bf540012d1a9d064cda7d921ba7fbbbd4756279f2beca86a7e78effe7c609d937ced8183bc81b06f6728b501e41eb1fb230a73fe93447066ed94d1d64f389e9df24447eb7ff6b4679b0655fc87331588bdf22332d0f2943c17e2d05138023b6c22ed544e84f3babb42124c9b79c041089a7cea346702aaeb84bade6494c0d86e8146b0832e9030e70621c704c1ec55eb217c0a5eff4a03336da52ea00e8cc4befc64e4fca9dad88e3b513f3a2a990caa9d81ca9eefab5ec1a395fc5ec167d305013e5d279b966318f8f2986c340c444e63099768d43443a2d5dfd92757942e3b8c70e2441cda0bd2671f36efd21bea09dc8c99a7ab934a48054d4e22b66f617085ae655d374fe18260eb5145cb4c814102ac8c390f5c24f26194debcb5aa349545f5056e74eb1c966942c730fed8ab5d9b85e15791a22ef47bab7a16848f983ca3ca3fdc9b4e3c594ba524a75e66201516345547414eef368aeb63c9394fdd9597858f89b2abf1afce54130d9debaa04eeae23f79ccd61588856cedbbe414baeefa5a6e606e180564130cb664a11243ecf92d6474978d426d07ad90697567765611afa03aecb7bc9696c0feac35c417492bb1469484f9acaa8b2135f14e8e6e3e536a402694eceebeda0777bc551b864cbbf16d8d4937ea5e6d998926cc3dbaad93df0a0e7e40929ff8715571791486a279f25727863becc5eece089bfcb41403a917bf6fc17dead0c3bda4c7b6df4a34be5394eb22f4d86228d684670db275b83bc03ee1607106cfc310442a26dcedb20603a40fbfe73e6af589fb05173e2c23f27b000c2b74286964dd10b41e086263e54b5603f6e22a58cd532c716a8f6ef69265736f111b3acee540d2e48e4fd14fbcf24ab665b067028ae428f6e3b7f16f27031d0894d3cd8813d68a2ea703c7ea963944a2a87486deb23071a9ed8bf1673178e564e0de07f2d26775049acef2557844dcaf6330783bc39bd37ed0eb87461f6f9996cf2fadcece55d9d2f55f18150cf6b0b15042a4396bc151c4c9db039ab8c323579158a74d7adee6a7eb2befd16d39cefeafb2776cf1e2723d3ec4044df0c9bdf4d40e1ea2d9e271b12cc65eec205205ba24ae97242f89aaba44e72f5e1a90cd4e515484688baf9ac52c5199a651b24e82259a9f64cc5585bd6d0a95b5c02b4471af7d0db05d64871dc3b7dcf5ec8df6ba41cff47c3d470877aa3511bc4a3b1fcb010e08380ee1afe1397e9f98bf56f668316041541bd10c2c87d8a3309f12da99672e17fb2ffdf316809891aacd3c7d382a831a883fb53ed2282bce048e9402f8866d084131fca5570ceedd55ad85ecfa52d346b5a90ffa090174276bae70df066f7e2d5e7cf475b239703a72285ee9656ce5b8333abb10bee7b04e126f7b561fc955a7b7462126f2d70cc8fdc81c38bbe4d4c5affb0b485b0e628100800d73bbb56b480d2df08ea701550e30fe375e41ed81b8aac40ed3c0409a04b15760799aa6136d722ba745ffd5cb33eb4f871e16853cb2f20214d66702e6fe2d855cc0ccc2b73997d621c7fed2f4ac0ea71752caac9c43fb7f650084d2d8bb850cacfcb7372c9fb83ae20ebf57f569cf0fde2642c0da70310f9349bd94af36da59fe3756da383004645ffb3309758aaa3344229a80a6980c852a030b54adbc8425ce49a8ac53ed7f65506a5ddb8a8eb350e597f8dbb0c6d5955e6e0fe77ae570bb20f5fe158da12cf67bf38959d2c3e35df92745b7d681b742a4ea58692bdf617545667d393a6dcc09c5eab8c2ae9be54cb31eff9350345ae7b8cb147ec874f975ae801899ecc798167110e32a01b8fa455dbdd7eb2ea70ca8016f5f92899c2da098ce2d719b5086ff9de1c92059b011a70811cadd4a4dd8347c6c0fdad965ecaf73deb06e2c8a2dd0e8bcc293f1b76c66545a707e39242b79485e06c3d6419dd8650c27d9cb3e1cddf1172c4a30c4dcd812662166cf50cf42e49c53a68753845fdd2c78964542fce0aa58750e2d55888da7805df0799cfd5aea1d693d9e2a4bd678b5d1178d56f6700d47c6c330a2a9111b898a77a1d02bc66dc81592ec47d8ee6fb09907e3e9d4b7453fa78e8613a4c6b188265f57e1bdfd03a87b61fd0363f637938f74ced2b0b536bb6bf1fad5ad9ef27e910153c2ad82489812e390b22a794eaca46c9b9265568d10d8035c1e217f62a8d3ece0a170a7117a1157516c676b25632c56188c23001db3a9cfcdfbc48c89fe3b1329ce8a42105bc8796e6c1f8cfe27da1f850294fa5b6f431ca2d62d08e72ec38434dc85381844cb2414f2387ad90f10dcc746521b08f0605bd20640d536a6faa89176022bb0b158c64fe21c3c51ac0c35d3427b7788e3711eda72a20b7ef3b1b548374411b7115b5b0d5adbe44e7442152a10721e22e9ef5deaadd2632943626d5b89d55b70921a9e7fb5af550ed3c0b6165a0a0dd52c1f0afcbb56b615b171737814f9670002d356c4616ca2fe07625e8f5c451df936b2f1eca837a718d114350cda58dbb8420f19ad7ffb7ce79a2ae5eed327feeca5739d7144020f10478854327127c3c49df753e8ccd9417460be608d0c97ec9b9bd4e41b35c960936b1a02d7d0cfc8eb751cd4af2e710af206377580f6d8502dc81e761553b8d3aafdba2b54dfea4cc66fee0c909c4cdb8900c8af4bccf3f648fb6eccdd0f389537b0fb3f83d3ee538a6782eaf8ffa7d8a3641895f81875a00c7ad2b17660"}]]}, 0x1140}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 18:27:16 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0, 0xfffffffffffffffe) 18:27:16 executing program 4: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)) 18:27:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x200) 18:27:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x48302, 0x0) 18:27:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) 18:27:16 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x40) 18:27:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0xb010, 0x101, &(0x7f0000000000)=0xf8}) 18:27:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:16 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002080)={0x20, 0x0, r1}, 0x20) r2 = geteuid() getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0xa0, 0x0, r1, {{0x4, 0x3, 0xfffffffffffffc01, 0x0, 0x631f, 0x1000, {0x0, 0xfffffffffffff25f, 0x5, 0x5, 0x6, 0x5, 0x8, 0x9, 0x3, 0xa000, 0x7, r2, r3, 0x0, 0xc2c6}}, {0x0, 0xf64a456fc5bb2c23}}}, 0xa0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80880, 0x0) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x7, 0x800, 0x5, 0x7}) 18:27:17 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x240000, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x90800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x5, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r2}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000002900000229bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05000b0000000000f1fff2ff080001007366620009000100686673630000000034000200100003000700000053d8000006000000100002000600000006000000050000001000020009000000ff0f000003000000080001007265640006000500ff0000000b0001006d717072696f0000090001006866736300000000140002001000020009000000ffff000000010000060005000103000006000500352000000880df907b56810de05a485018082962"], 0xc8}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="10002bbd7000fedbdf256000000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8011) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000140)) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x20, 0x0, 0x100, 0x0, 0x99f, 0x9, 0x9061}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000500)={0x54, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x39}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34039602", @ANYRES16=0x0, @ANYBLOB="04002b0008000300"/18, @ANYRES32=r7, @ANYBLOB="0a00060008021100000000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:17 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x501200, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x64, 0x20, 0x1f}) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40020000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x4080}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) getpeername$netrom(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x100, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 4: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040050) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 4: read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/182, 0xb6) 18:27:17 executing program 2: ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000000)=0xea) socket$inet6_tcp(0xa, 0x1, 0x0) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpgrp(0xffffffffffffffff) getpeername$netrom(r0, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0x3) 18:27:17 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000100)=0x5) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) userfaultfd(0x800) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x5, 0xffffffff, 0x5, 0x7fff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x288002, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x2f, 0x5}) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 18:27:17 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x342, 0x0) 18:27:17 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x4000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600100, 0x0) 18:27:17 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:17 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ff05363f1de8ada43578207f9b8fa3da"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8a6b48f373bfffbc4a4d672bc1"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "b84a5f36fc54589b606d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000001c0)=0x3668) r1 = request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='&\x00', 0xfffffffffffffffe) r2 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000180)={0xd14, 0x9317}) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000280)=0x6, &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 18:27:17 executing program 4: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d343, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x4400, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x2, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 18:27:17 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x5, 0x1, 0x8, 0x800}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x64702, 0x0) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 18:27:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0xfffffffc}, @acquire_done={0x40106309, 0x3}], 0xf3, 0x0, &(0x7f0000000180)="de7ad32eef288c1f577be5b65cb9d87fa9234797e7769f94d3550710c90c6474b3a01de7e47d65d12f98a0ae4a60872cb414eb27d55ee313b051c3e670393762ef4de17dbd0f6a16691201a0673df6be4e3310217e755f68bfd8fc2d0ca39af1eb3f283fa86563cb9c66e80c72b76ccc77ede66a3919077130d144bc3fc5b27f782077cb859e80794f527489b092f4e939be5a35ac80ed47f98037a0b9ba483efd3570e752ec8d2e302dffe22562657141ed3e35149662d6f5f2d1b0400700000000000000f8255d9afe5934001219546db55c0cb30745f3bf705b7864fd92a0efa5469505705ae51c8b6bf8f050d42554a9ca"}) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) [ 583.876513] binder: 8991:8992 ioctl 4018620d 0 returned -22 18:27:17 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x1}) 18:27:17 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 18:27:17 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20400, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x17) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x545fc2, 0x0) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x480600, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) 18:27:17 executing program 4: waitid(0x0, 0x0, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3299c2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="06009800090000000400ff000400ec00"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004c40) r1 = eventfd2(0x80, 0x80000) r2 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000580)) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x4200, 0x0) read$fb(r4, &(0x7f00000005c0)=""/191, 0xbf) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x105, 0x2}) getrusage(0xffffffffffffffff, &(0x7f0000000300)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r1, 0x7fff, 0xff, r4}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 18:27:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000, 0x1}) [ 584.044259] binder: 9016:9017 ioctl 4018620d 0 returned -22 [ 584.053117] binder: 9016:9017 ioctl 4018620d 200001c0 returned -22 [ 584.062390] binder: 9016:9017 ioctl 4018620d 0 returned -22 [ 584.065057] binder: 9016:9018 ioctl 4018620d 200001c0 returned -22 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x100000001, 0x6}) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1cb302, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x11d382, 0x0) [ 584.676061] binder: 8991:8992 ioctl 4018620d 0 returned -22 18:27:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x336bdf1bfe705ce7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x10}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x70, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd3, 0x53}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3c}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfd}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file1\x00', 0x0, 0x10}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000080)={@my=0x1}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r6, &(0x7f0000002080)={0x20, 0x0, r7}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)={0x200, 0x0, r8, [{{0x1, 0x0, 0x9, 0x10001, 0x2, 0x6, {0x3, 0x81, 0x1, 0x3, 0x8d4a, 0x9, 0x3, 0x81, 0xbd, 0x2000, 0x3, r9, 0xee01, 0x5}}, {0x0, 0x2, 0x3, 0xfffffff9, 'G\xa2-'}}, {{0x3, 0x0, 0x2, 0x6, 0x7, 0x8, {0x2, 0x7, 0x569, 0x875e, 0x0, 0x3, 0x8, 0x6, 0x2, 0xa000, 0x3ff, 0xee00, r10, 0x1, 0x6}}, {0x3, 0x6, 0x8, 0x0, 'nl80211\x00'}}, {{0x0, 0x2, 0xffffffff, 0x1000, 0xc, 0x10000, {0x5, 0x6, 0x101, 0x1ff, 0x7fffffff, 0x1f, 0x100000, 0x81f, 0xfffffffb, 0x6000, 0x8, 0xee00, 0xee01, 0x101}}, {0x5, 0x9, 0x11, 0x8, '/dev/vhost-vsock\x00'}}]}, 0x200) 18:27:18 executing program 4: ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000000)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r2, 0x0, 0x0) getpeername$netrom(r2, 0x0, 0x0) r3 = eventfd(0x600) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r3, 0xffffffff, 0x9, r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1ffff}, 0x8) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xd000, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xc0, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x50}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1001}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x84, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="44c9b5e7c447f128af5083ed9f731b437a9ae967983f60894a5a"}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x80e1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, r0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x1, 0x7, 0xfff8, 0x9]}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8803) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10100, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1000) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x6, 0x81, 0x0, {0x3, 0x80, 0x101, 0x81, 0x7, 0x1f, 0x7066b05d, 0x8, 0x247, 0x8000, 0x4, 0x0, r0, 0x2, 0x800}}}, 0x78) 18:27:18 executing program 2: eventfd(0x10dad) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x498300, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0xfffffffd) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1ef703, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xe70335dbc91a8415, 0x0, {0x52f8}}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) 18:27:18 executing program 2: ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x3f9}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 18:27:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="80b8a8e2", @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf256c0000000c009900040000005b0000000800270000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x24000085) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@gettaction={0xe8, 0x32, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf47}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x96, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcf}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xba000000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8b}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x215ff9415f2a4cd1}, 0x4040894) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x1, 0xffffffffffffffff, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000480)={0x90, 0x0, r2, {0x3, 0x1, 0x5, 0x2, 0x2, 0x80000001, {0x5, 0x8, 0x6, 0x3, 0x6, 0x3f, 0x3, 0x6, 0x8, 0x6000, 0x3, 0xee01, r3, 0x4, 0x101}}}, 0x90) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x9cf303, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) 18:27:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101002, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0x101) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r0, 0x401, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x249e, 0x52}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x17f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x64, r5, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xffff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x40088c2) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x159702, 0x0) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x422200, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x1, 0x0, &(0x7f00000000c0)='2'}) 18:27:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xffffffffffffffca, &(0x7f0000000880)={0x0}}, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 2: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000002140)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000008240)={0x3d8, 0x0, 0x0, [{{0x6, 0x3, 0x1be, 0x4, 0x80, 0x9, {0x0, 0x22d, 0x1ff, 0x3ff, 0x9, 0x1, 0xfffffffe, 0x8, 0x0, 0x8000, 0x723fde2e, r1, 0x0, 0x6, 0x7ff}}, {0x4, 0x1ff, 0x1, 0x3ff, '/'}}, {{0x3, 0x2, 0xc38, 0x142f, 0x3, 0x1000, {0x4, 0x7fff, 0x0, 0x0, 0x401, 0x5, 0x4, 0x100, 0x4, 0xa000, 0x310000, r2, 0xee01, 0xd07d, 0x1}}, {0x0, 0x0, 0xf, 0x8000, '/dev/sequencer\x00'}}, {{0x1, 0x3, 0x4, 0x2, 0x0, 0x0, {0x4, 0x1, 0x200, 0xa39, 0x5, 0x2, 0x4, 0x1, 0x3, 0xc000, 0xffff8000, 0xee00, r3, 0x20, 0x3}}, {0x1, 0x0, 0x2, 0x800, 'D\xfa'}}, {{0x1, 0x0, 0x1, 0x3f, 0x6, 0x7817, {0x5, 0x401, 0x5, 0xfffffffffffffffd, 0x3f, 0x400, 0x7fff, 0x58c, 0x1, 0x1000, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x3}}, {0x3, 0x0, 0xf, 0x183a, '/dev/sequencer\x00'}}, {{0x3, 0x2, 0x1, 0x7ff, 0x5, 0x4c62, {0x3, 0xeda6, 0x200, 0xffffffff, 0x8f, 0x3ff, 0x10000, 0x248, 0x80000001, 0x2000, 0x0, r4, 0xee01, 0x81, 0xfffffff9}}, {0x2, 0x6, 0x4, 0x40, '(-/#'}}, {{0x3, 0x1, 0x6, 0x1, 0x8, 0x17, {0x6, 0xffffffff, 0x3, 0x8, 0x4, 0xfd8, 0x1, 0xe753, 0x8001, 0x2000, 0x401, r5, r6, 0x7fff, 0x7fff}}, {0x5, 0x0, 0x0, 0x5}}]}, 0x3d8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x739283, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) write$FUSE_ENTRY(r0, &(0x7f0000000080)={0x90, 0xfffffffffffffff5, r2, {0x4, 0x2, 0xffff, 0x6, 0x0, 0x8001, {0x0, 0x80, 0x3ff, 0x911, 0x7, 0x9, 0xffffb68d, 0x1, 0x3, 0x1000, 0x7fff, 0xee00, 0xee01, 0xffffffff, 0xebef}}}, 0x90) 18:27:18 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=""/192, 0xc0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0x4) 18:27:18 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:18 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x420000, 0x0) 18:27:18 executing program 4: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000ffc000/0x1000)=nil}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14d302, 0x0) 18:27:19 executing program 2: socketpair(0x2, 0x3, 0xfffffff7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x69c, &(0x7f0000000080)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x482002, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x5, 0x3}) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x111002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x248383, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 18:27:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x5, 0x401, 0x3ff, 0x1000, {0x6, 0x400, 0x6, 0xffffffffffffffff, 0xdd4a, 0x9, 0xe1d, 0x4, 0x0, 0x6000, 0x1, 0xffffffffffffffff, 0xee00, 0xb7e, 0x400}}, {0x0, 0x9}}}, 0xa0) 18:27:19 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x4) 18:27:19 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x80, 0x0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) getpeername$netrom(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000000)={0x4, r0}) 18:27:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8001, 0x0) write$vga_arbiter(r0, 0x0, 0xfffffced) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80480, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x15}}, 0x20) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) getitimer(0x1, &(0x7f0000000000)) getpid() 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4e741, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 18:27:19 executing program 2: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "b0425dbaebd8d2ab4ae22f79e38dae0fa50641fd4e14dd548c173b1ec32b7f5a8fcbb7859f1e99bb4a5e8b2ce491f3625acd0024c702b14d43d572304d7fa785cce30ce18a39fe572ab93673d89ed902231fc874538a1e925f1374318069e8c53e6c9f724f5fa074ef452e99496887ca4f"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1f}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20040857) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d5c3, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x881) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x5a) 18:27:19 executing program 2: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10001}) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x0, 0x4, 0x1}) 18:27:19 executing program 2: ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0xb7, 0x4a, 0x4, 0x3, 0x0, 0x92, 0x6, 0x3c, 0x3, 0x9, 0x6, 0x81, 0x9, 0x3, 0x6}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x787382, 0x0) 18:27:19 executing program 4: ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x0, 0x4, 0x3ff, 0x3, 0x3}) 18:27:19 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB="600000002800000427bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="020008001c000f000800eb7f06000500020800000600050000a20000090001007072696f000000000900010063616b65000000000b00010000"], 0x60}}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x7b3303, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000001c0)={0x687e, 0x7, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000200)) ioctl$BLKFRASET(r1, 0x1264, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r5, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x7fffffff, 0x0, 0x10001}) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000180)=0x3f) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000003c0)={0xfffffffffffffdc5, 0x2}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r6, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x1, r6}) 18:27:19 executing program 2: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc5a, 0x65}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) recvfrom$netrom(r0, &(0x7f0000000180)=""/155, 0x9b, 0x40000040, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default]}, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x9, 0x80}) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x7, 0x4) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x3, 0x7}) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000100)={0x0, "91a80deaae1c568a8613d2659c12d2599ca0152fcafd7b1c9a31ef5f86a337b177306548f07fb8a229aff4b9b2d38780e9c4f0b77057f7f0b2ff9367741d1532", 0x3f}, 0x48, r0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x401, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000180)=0xfffffffc) 18:27:19 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x30201, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x2, 0x3, 0x9, 0x5, 0x8, 0x5, {0x2, 0x3, 0x8, 0x2, 0x6, 0x7, 0x0, 0x101, 0x7fffffff, 0x1000, 0x7ff, 0xee00, 0x0, 0x9, 0x4800000}}}, 0x90) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000240), 0x8) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', 0x0) keyctl$search(0xa, r2, &(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x145b82, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x4}}, 0x20) 18:27:19 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x30201, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x0, {0x2, 0x3, 0x9, 0x5, 0x8, 0x5, {0x2, 0x3, 0x8, 0x2, 0x6, 0x7, 0x0, 0x101, 0x7fffffff, 0x1000, 0x7ff, 0xee00, 0x0, 0x9, 0x4800000}}}, 0x90) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) read$eventfd(r0, &(0x7f0000000240), 0x8) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', 0x0) keyctl$search(0xa, r2, &(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x145b82, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0xfffffffffffffff5, 0x0, {{0x100000000, 0x2}}}, 0x28) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4e741, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x739283, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002080)={0x20, 0x0, r2}, 0x20) write$FUSE_ENTRY(r0, &(0x7f0000000080)={0x90, 0xfffffffffffffff5, r2, {0x4, 0x2, 0xffff, 0x6, 0x0, 0x8001, {0x0, 0x80, 0x3ff, 0x911, 0x7, 0x9, 0xffffb68d, 0x1, 0x3, 0x1000, 0x7fff, 0xee00, 0xee01, 0xffffffff, 0xebef}}}, 0x90) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4e741, 0x0) 18:27:19 executing program 2: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4e741, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x9cf303, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x4e741, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x4e741, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1ef703, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0xe70335dbc91a8415, 0x0, {0x52f8}}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x4e741, 0x0) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 18:27:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 18:27:36 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 18:27:36 executing program 5: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d343, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) getpeername$netrom(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x4400, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x2, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 18:27:36 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ff05363f1de8ada43578207f9b8fa3da"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8a6b48f373bfffbc4a4d672bc1"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "b84a5f36fc54589b606d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000001c0)=0x3668) r1 = request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='&\x00', 0xfffffffffffffffe) r2 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000180)={0xd14, 0x9317}) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000280)=0x6, &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 18:27:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:36 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) getpeername$netrom(r0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x8) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x80000001) 18:27:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:36 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)) 18:27:36 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffffe) 18:27:36 executing program 0: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x420080, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000200)={r1, 0x200, 0x0, r2}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 18:27:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:36 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)) 18:27:36 executing program 0: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:36 executing program 4: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x8, 0x5, 0x1}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000, 0x0) 18:27:36 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x8, 0x5, 0x1}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000, 0x0) 18:27:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:36 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)) 18:27:36 executing program 0: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:36 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, r3, r2, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:36 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:37 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14d302, 0x0) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:37 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, r3, r2, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, &(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)='[@\'[%*\x00') 18:27:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, r3, r2, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, &(0x7f0000000080)='[@\'[%*\x00') 18:27:37 executing program 4: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0x24}}, 0x18) 18:27:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, 0x0) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, r2, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040)=0x0, 0xffffffffffffffff, &(0x7f0000004140)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x7fffffff) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000042c0)={0x100000, &(0x7f0000004280), 0x8, r5, 0x3}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004180)={0x78, 0x0, r1, {0x6, 0x3f, 0x0, {0x2, 0x101, 0x4, 0x9cee, 0x0, 0x8000, 0xddba, 0x2, 0x1ff, 0xc000, 0x9a, r2, r3, 0x8, 0x1}}}, 0x78) 18:27:37 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x58ca67f2, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040)=0x0, 0xffffffffffffffff, &(0x7f0000004140)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x7fffffff) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000042c0)={0x100000, &(0x7f0000004280), 0x8, r5, 0x3}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004180)={0x78, 0x0, r1, {0x6, 0x3f, 0x0, {0x2, 0x101, 0x4, 0x9cee, 0x0, 0x8000, 0xddba, 0x2, 0x1ff, 0xc000, 0x9a, r2, r3, 0x8, 0x1}}}, 0x78) 18:27:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:37 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040)=0x0, 0xffffffffffffffff, &(0x7f0000004140)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x7fffffff) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000042c0)={0x100000, &(0x7f0000004280), 0x8, r5, 0x3}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004180)={0x78, 0x0, r1, {0x6, 0x3f, 0x0, {0x2, 0x101, 0x4, 0x9cee, 0x0, 0x8000, 0xddba, 0x2, 0x1ff, 0xc000, 0x9a, r2, r3, 0x8, 0x1}}}, 0x78) 18:27:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:37 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002200)={0xa0, 0xe1ed85c41ef472cd, 0x0, {{0x0, 0x0, 0x100000001, 0x2, 0xb7, 0x1000, {0x0, 0x9c, 0x5, 0x1000, 0x100000000, 0x8000, 0x5, 0x7f, 0x81, 0xc000, 0x8, 0x0, r1, 0xf8895e61, 0x5}}, {0x0, 0x9}}}, 0xa0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x65f, 0x9a9, &(0x7f0000000000)="6815ea2aa500e3abc20ac453bc9789c53ab5362a0f0bdeefc7b715588af0138547d4bdc6aa68b22de6d5ee33491373742aa9a49c506cfeb849cf5a4ec10d8a4edd7343566e8dc3ea2e821fd1600dccb43ed90458616f7e0066519378b9ece383baa18c2148c4b0", &(0x7f0000000100)="55e4d6ff47f9dd42596673e788e184ab862d2418a480a4ff8a1e51bcb9efa6a04f9a733e0d278bf7fcc51941314864f68ca88d55a2e22d5a384cf14e67b873c8d54fcf06ac178a268affe1217ca3ffea8fe6e89e54b3b33204e20816c419f1ac5825f8d152c5dba7309aedd7abfa68beaa69da5edd08c50fed3d9a415cf53c1bb2f8e81a620c3f9c56c5afff5d713c5696a1043481057a0fa9af0b7de44e07b47461cc36b9e62ab8449870ff93", 0x67, 0xad}) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x7fffffff) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000042c0)={0x100000, &(0x7f0000004280), 0x8, r2, 0x3}) 18:27:37 executing program 4: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 18:27:37 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x7fffffff) 18:27:37 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) 18:27:37 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x167802, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x1c}) 18:27:37 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)=0xb6e) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 18:27:37 executing program 4: r0 = add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x581400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xd6a, 'syz0\x00', @bcast, 0x0, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd990001000000150000000c0043000300000000100000b580a6eea46be8b7486f7b938b49ee1f3bfacb09f31ccb4626e0590e18fefbc24b1e64c0af9892a10e2b"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r4) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x1, r1}) 18:27:37 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) 18:27:37 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000012c0)=0x80) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:37 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000004240)={@local}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:37 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x17}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x700, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xaf}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x8830) socketpair(0xa, 0xa, 0x9383, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x178, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x57}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa7d3}, @NL80211_ATTR_IE={0x138, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x3}}, @random={0x40, 0x86, "925700fd04f61e56e38e90e5599f89acddf78e35c347903584ba7b9eb4f8be117079157e61acfd8078b7b6de3130f35088b35285b96b189b379821b16ffe5fe79eec9a7f7448abc224d4d356c23871da3eb33de39313efea9757ee5d839e8db919e408b655d0b41212b7004dc404b72d2e4e17000b01f93be359f0a1d52e8f7c36c7f5a7de5f"}, @random_vendor={0xdd, 0x7d, "cd3f6632110cb1f5d6747b6000d65362008c41b119864d7651000f0c4438b652b2c03ab3b5a51c9337a3906ebe4b3655ede3c8bcded9f6b4ad96c2aa9d35f3910166fbac7553c1208ba3915233e194cd6869e0e3c2ec0bdb5b160d419168cf263df10917a4c2f0df73800c045d547ff049b2a7f218a60ade9d87808a55"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xac, 0x40}}, @gcr_ga={0xbd, 0x6, @broadcast}, @channel_switch={0x25, 0x3, {0x1, 0x143, 0x3f}}, @link_id={0x65, 0x12, {@random="ff8b10ee3713", @broadcast}}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x2004c044}, 0x800) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x8, 0xfa}) add_key(&(0x7f0000000040)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000012c0)=0x80) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000012c0)=0x80) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:37 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x14d702, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 18:27:37 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:37 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:37 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:37 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:37 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @dead_binder_done], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f00000006c0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e6ff5f4d", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf255c0000000c009900090000006a00000008006b00f000000008006b001c02000008006b003c00000008006b003700000008006b006e00000008006b001400000008006b006e000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000850) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="768b0a9b", @ANYRES16=r1, @ANYBLOB="000129bd7010fcdbdf65670000000801c40004000000b8da202d05000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000801) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x25dfdbfd, {0x80, 0x80, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x3}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0xa08004, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000680)={0xeb4, 0x47}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x8c}}, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4d9f8e6df1d29be9f22dcfb9848706ebdcd633f6d2f37", @ANYRES16=r1, @ANYBLOB="080028bd7000fddbdf250600000008000300", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000740)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 18:27:38 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:38 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:27:38 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 0: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:38 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r0 = add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0xfffffffffffffedc, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000004200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) [ 604.326415] binder: 9523:9531 ioctl c0306201 0 returned -14 18:27:38 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 1: add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x4, &(0x7f0000000280)=""/137, 0x89}, 0x80000000) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:27:38 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x80000000) 18:27:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:38 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1f, 0x2}) getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:38 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 18:27:38 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) [ 604.447749] binder: 9545:9550 ioctl c0306201 0 returned -14 18:27:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:27:38 executing program 3: getresgid(&(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:38 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 18:27:38 executing program 3: getresgid(0x0, 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 1: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) [ 604.575216] binder: 9563:9568 ioctl c0306201 0 returned -14 18:27:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:38 executing program 0: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 3: getresgid(0x0, 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 1: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) 18:27:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:38 executing program 0: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000810) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:38 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x3, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x0, {0x9}}, 0x18) ioctl$BLKFRASET(r0, 0x1264, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 18:27:38 executing program 3: getresgid(0x0, 0xffffffffffffffff, &(0x7f0000004140)) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x6, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:38 executing program 3: getresgid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x145, 0x754}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xffffffff, 0x9cd, &(0x7f0000000140)="068272e4315402de55e116ec1c915db00558eb53aa1d6650752f401423db6df9a89b35e8f499fecce37bfda3994b802da3f5a542c72a0d511a357b02040ed1d2afe5d291abcd1d2cf5e8633e59177f137789b6164ca2793a2678351ce7b46a84c904afa5854d4d253c1c58c74a0f9eff7e1662bc2340614ab0301c", &(0x7f00000001c0)="2a5cbf98578063cd7ec201fe1916663c4c435392fd238b179f56255876235426ee827c23abf5ca232e450572e4dc42e9a3113c3dc79bf66cbdd130a7fba7fdb4d834dd231c9b348b24fd8f745a88c6", 0x7b, 0x4f}) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x145, 0x754}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xffffffff, 0x9cd, &(0x7f0000000140)="068272e4315402de55e116ec1c915db00558eb53aa1d6650752f401423db6df9a89b35e8f499fecce37bfda3994b802da3f5a542c72a0d511a357b02040ed1d2afe5d291abcd1d2cf5e8633e59177f137789b6164ca2793a2678351ce7b46a84c904afa5854d4d253c1c58c74a0f9eff7e1662bc2340614ab0301c", &(0x7f00000001c0)="2a5cbf98578063cd7ec201fe1916663c4c435392fd238b179f56255876235426ee827c23abf5ca232e450572e4dc42e9a3113c3dc79bf66cbdd130a7fba7fdb4d834dd231c9b348b24fd8f745a88c6", 0x7b, 0x4f}) 18:27:38 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x3b, r2) 18:27:38 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x145, 0x754}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xffffffff, 0x9cd, &(0x7f0000000140)="068272e4315402de55e116ec1c915db00558eb53aa1d6650752f401423db6df9a89b35e8f499fecce37bfda3994b802da3f5a542c72a0d511a357b02040ed1d2afe5d291abcd1d2cf5e8633e59177f137789b6164ca2793a2678351ce7b46a84c904afa5854d4d253c1c58c74a0f9eff7e1662bc2340614ab0301c", &(0x7f00000001c0)="2a5cbf98578063cd7ec201fe1916663c4c435392fd238b179f56255876235426ee827c23abf5ca232e450572e4dc42e9a3113c3dc79bf66cbdd130a7fba7fdb4d834dd231c9b348b24fd8f745a88c6", 0x7b, 0x4f}) 18:27:38 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)}) 18:27:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:38 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:38 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000000c0)={0x145, 0x754}) 18:27:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)}) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:39 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) 18:27:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x0, 0x0, 0x0}) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000180)) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) 18:27:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8, 0xdd3, 0xb082, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10b000, 0x0) 18:27:39 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)}) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:39 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, 0x0) 18:27:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400081, 0x6, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x7f}) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2000, 0x0) 18:27:39 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}]}, 0x28}}, 0x0) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) getpeername$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @remote, @null, @rose, @remote, @remote, @default]}, &(0x7f00000002c0)=0x48) 18:27:39 executing program 0: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0xf9c, 0x60, 0x78, 0x1, 0x7fffffff, 0xf, 0x1, {0xf0000000, 0x0, 0x1}, {0x401, 0x5}, {0x20, 0x8061}, {0x5, 0x9, 0x1}, 0x3, 0x10, 0x8, 0x40, 0x1, 0xfff, 0x3ff, 0x2, 0x29, 0x2, 0x3ff, 0x3f, 0x0, 0x200, 0x1}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x42, 0xfffffffffffffffb) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 1: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0xf9c, 0x60, 0x78, 0x1, 0x7fffffff, 0xf, 0x1, {0xf0000000, 0x0, 0x1}, {0x401, 0x5}, {0x20, 0x8061}, {0x5, 0x9, 0x1}, 0x3, 0x10, 0x8, 0x40, 0x1, 0xfff, 0x3ff, 0x2, 0x29, 0x2, 0x3ff, 0x3f, 0x0, 0x200, 0x1}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x42, 0xfffffffffffffffb) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000040)=0x48) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:39 executing program 1: add_key(&(0x7f0000000280)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 2: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x800, 0xf9c, 0x60, 0x78, 0x1, 0x7fffffff, 0xf, 0x1, {0xf0000000, 0x0, 0x1}, {0x401, 0x5}, {0x20, 0x8061}, {0x5, 0x9, 0x1}, 0x3, 0x10, 0x8, 0x40, 0x1, 0xfff, 0x3ff, 0x2, 0x29, 0x2, 0x3ff, 0x3f, 0x0, 0x200, 0x1}) add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x42, 0xfffffffffffffffb) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x42, 0xfffffffffffffffb) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 1: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:39 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:39 executing program 1: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:39 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:39 executing program 1: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:39 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 18:27:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x1f}}, {0x0, 0x8}}}, 0xfffffffffffffdfd) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x6, 0x4, 0xcd, 0x1}) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002140)={0xa0}, 0xfffffffffffffdfd) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x6, 0x4, 0xcd, 0x1}) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x104, r1, 0x0, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xcb, 0xbe, "f5e325dc809123d6b789ad3710700eaf5d953a8fe7537748ba7d00da889429ef16828b92c59df45964fbb3b46cff50d8177770d60922182fa4959efd9cbade62485fa24a2093f2c49b8734c6bbbcc732fc83764203ead7534d14f5ebec77f64c902f6136eec5b718d1df24174963262df4e6e579bd1c1fc43074ed6156f25cc2ee9728daafb40fde524956fccb13de5a6d99ce18983baf6036ec416b60c26203c2efea4fe12a3a7a15dcb432d12fa9599dcb049375c4e4ebe51e334ea588439167be1989ad10fc"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x810) 18:27:40 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:40 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x6, 0x4, 0xcd, 0x1}) add_key(&(0x7f0000000000)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 5: syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe5, 0x4, 0x2}}}, 0x28) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x6, 0x4, 0xcd, 0x1}) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) 18:27:40 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:40 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000001c0)=0x7) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) 18:27:40 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x42}) 18:27:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 3: add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='}!+}(%^@!@\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000200)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000180)={0x0, "b89f3b043ea06e676a4f94f0d672ecdee35a65245e75a8bd0b2f7e672332428d494ab90c0fc80a048dc27132ecd6ae910a82b2eb7a96b737206749aa44aa9628", 0x3e}, 0x48, r1) keyctl$negate(0xd, r0, 0x80, r2) 18:27:40 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) 18:27:40 executing program 0: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r0) 18:27:40 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/nullb0\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, 0x0) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:40 executing program 1: add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:40 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:40 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:40 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) 18:27:40 executing program 1: add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:41 executing program 5: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:41 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80920, 0x0) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 1: add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:41 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 3: add_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:41 executing program 4: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:41 executing program 4: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:41 executing program 4: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc9537335", 0x50, 0xffffffffffffffff) 18:27:41 executing program 4: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:41 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:41 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:41 executing program 4: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:41 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:41 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:42 executing program 4: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:42 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000100)=""/241, 0xf1, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) 18:27:42 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 18:27:42 executing program 0: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:42 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:42 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 0: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r2) 18:27:42 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 0: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc953733515a58c7b21027d006162c21ab61544992f126bb48ae709342f6744d3b27b40ac7c9856010a9cfea836b7308ad8945bef7bddb169d05450657022b49cc7333ee3a5e9dda11e7a9df7894cf78f66f7ded0", 0xa0, 0xffffffffffffffff) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r0) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, &(0x7f0000000200)=""/17, 0x3, 0x2}}, 0x48) 18:27:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:42 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r4, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) keyctl$get_persistent(0x16, 0x0, r5) 18:27:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:42 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:42 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:42 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:42 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', 0x0, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b", 0x3b}, 0x48, r1) 18:27:42 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d556fb0d46e9c9d1c7a2238e4ce0bf8c8e6f8121b8aee8a01f720614590768c4e30de6c246bc9537335", 0x50, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, 0x0, 0x0, r1) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) 18:27:43 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 3: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:43 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:43 executing program 3: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:43 executing program 3: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:43 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, 0x0) 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) 18:27:43 executing program 2 (fault-call:2 fault-nth:0): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631", 0xa, 0xffffffffffffffff) [ 609.908619] FAULT_INJECTION: forcing a failure. [ 609.908619] name failslab, interval 1, probability 0, space 0, times 0 [ 609.948531] CPU: 0 PID: 10407 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 609.956446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.965800] Call Trace: [ 609.968396] dump_stack+0x1b2/0x283 [ 609.972041] should_fail.cold+0x10a/0x154 [ 609.977247] should_failslab+0xd6/0x130 [ 609.981249] __kmalloc_track_caller+0x2bc/0x400 [ 609.985922] ? strndup_user+0x5b/0xf0 [ 609.989720] ? __check_object_size+0x119/0x22c [ 609.994326] memdup_user+0x22/0xa0 [ 609.997884] strndup_user+0x5b/0xf0 [ 610.001513] SyS_add_key+0xdd/0x370 [ 610.005167] ? get_instantiation_keyring+0x180/0x180 [ 610.010283] ? SyS_read+0x210/0x210 [ 610.013914] ? do_syscall_64+0x4c/0x640 [ 610.017890] ? get_instantiation_keyring+0x180/0x180 [ 610.022998] do_syscall_64+0x1d5/0x640 [ 610.026895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.032086] RIP: 0033:0x45deb9 [ 610.035274] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.042993] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 610.050356] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:43 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) [ 610.057632] RBP: 00007ff3dc0f5ca0 R08: 0000000009ee3cff R09: 0000000000000000 [ 610.064908] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 610.072181] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:43 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 2 (fault-call:2 fault-nth:1): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:43 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:43 executing program 1 (fault-call:0 fault-nth:0): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:44 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e62742", 0x14, 0xffffffffffffffff) 18:27:44 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) [ 610.201309] FAULT_INJECTION: forcing a failure. [ 610.201309] name failslab, interval 1, probability 0, space 0, times 0 [ 610.223996] FAULT_INJECTION: forcing a failure. [ 610.223996] name failslab, interval 1, probability 0, space 0, times 0 [ 610.272722] CPU: 0 PID: 10440 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 610.280640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.290344] Call Trace: [ 610.292954] dump_stack+0x1b2/0x283 [ 610.296584] should_fail.cold+0x10a/0x154 [ 610.300741] should_failslab+0xd6/0x130 [ 610.304716] kmem_cache_alloc_node_trace+0x25a/0x400 [ 610.309824] __kmalloc_node+0x38/0x70 [ 610.313886] kvmalloc_node+0x46/0xd0 [ 610.317601] SyS_add_key+0x253/0x370 [ 610.321315] ? get_instantiation_keyring+0x180/0x180 [ 610.326687] ? SyS_read+0x210/0x210 [ 610.330318] ? do_syscall_64+0x4c/0x640 [ 610.334293] ? get_instantiation_keyring+0x180/0x180 [ 610.339397] do_syscall_64+0x1d5/0x640 [ 610.343287] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.348484] RIP: 0033:0x45deb9 [ 610.351664] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.359367] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) [ 610.366636] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 610.373899] RBP: 00007ff3dc0f5ca0 R08: 00000000236965e1 R09: 0000000000000000 [ 610.381184] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 610.388452] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 610.406142] CPU: 1 PID: 10441 Comm: syz-executor.1 Not tainted 4.14.209-syzkaller #0 [ 610.414039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:27:44 executing program 2 (fault-call:2 fault-nth:2): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) [ 610.423397] Call Trace: [ 610.425992] dump_stack+0x1b2/0x283 [ 610.429627] should_fail.cold+0x10a/0x154 [ 610.433790] should_failslab+0xd6/0x130 [ 610.437960] kmem_cache_alloc_node_trace+0x25a/0x400 [ 610.443076] __kmalloc_node+0x38/0x70 [ 610.446883] kvmalloc_node+0x46/0xd0 [ 610.450602] SyS_add_key+0x253/0x370 [ 610.454321] ? get_instantiation_keyring+0x180/0x180 [ 610.458060] FAULT_INJECTION: forcing a failure. [ 610.458060] name failslab, interval 1, probability 0, space 0, times 0 [ 610.459426] ? SyS_read+0x210/0x210 [ 610.459439] ? do_syscall_64+0x4c/0x640 [ 610.459449] ? get_instantiation_keyring+0x180/0x180 [ 610.459459] do_syscall_64+0x1d5/0x640 [ 610.459479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.492526] RIP: 0033:0x45deb9 [ 610.495709] RSP: 002b:00007f4539400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.503505] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 610.510787] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 610.518054] RBP: 00007f4539400ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 610.525318] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 610.532586] R13: 00007fff5fe452cf R14: 00007f45394019c0 R15: 000000000118bf2c [ 610.539888] CPU: 0 PID: 10459 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 610.547775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.557131] Call Trace: [ 610.559740] dump_stack+0x1b2/0x283 [ 610.563376] should_fail.cold+0x10a/0x154 [ 610.567532] should_failslab+0xd6/0x130 [ 610.571517] __kmalloc+0x2c1/0x400 [ 610.575064] ? user_preparse+0x85/0x190 [ 610.579168] user_preparse+0x85/0x190 [ 610.582975] ? logon_vet_description+0x50/0x50 [ 610.587559] key_create_or_update+0x362/0xaa0 [ 610.592063] ? creds_are_invalid+0xe4/0x100 [ 610.596389] ? key_alloc+0xf80/0xf80 [ 610.600123] ? __might_fault+0x177/0x1b0 [ 610.604198] SyS_add_key+0x186/0x370 [ 610.607918] ? get_instantiation_keyring+0x180/0x180 [ 610.613029] ? SyS_read+0x210/0x210 [ 610.616660] ? do_syscall_64+0x4c/0x640 [ 610.620645] ? get_instantiation_keyring+0x180/0x180 [ 610.625768] do_syscall_64+0x1d5/0x640 [ 610.629690] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.634881] RIP: 0033:0x45deb9 [ 610.638067] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.645777] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 610.653069] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 610.660341] RBP: 00007ff3dc0f5ca0 R08: 000000001ecb0338 R09: 0000000000000000 18:27:44 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f", 0x5, 0xffffffffffffffff) 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:44 executing program 1 (fault-call:0 fault-nth:1): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:44 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="7cd6b7f4ccb73697302fd3994812eb7fe3e803e28ad32e253e9639250b5ef04708bbf1b566ee77514198c79920ba30477a54f0", 0x33, 0xfffffffffffffff9) 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dc", 0xf, 0xffffffffffffffff) [ 610.667615] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000002 [ 610.674885] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dc", 0xf, 0xffffffffffffffff) [ 610.722987] FAULT_INJECTION: forcing a failure. [ 610.722987] name failslab, interval 1, probability 0, space 0, times 0 18:27:44 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:44 executing program 2 (fault-call:2 fault-nth:3): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:44 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}, [""]}, 0x1c}}, 0x8806) [ 610.805742] CPU: 1 PID: 10470 Comm: syz-executor.1 Not tainted 4.14.209-syzkaller #0 [ 610.813666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.823026] Call Trace: [ 610.823576] FAULT_INJECTION: forcing a failure. [ 610.823576] name failslab, interval 1, probability 0, space 0, times 0 [ 610.825623] dump_stack+0x1b2/0x283 [ 610.825646] should_fail.cold+0x10a/0x154 [ 610.825660] should_failslab+0xd6/0x130 [ 610.825672] kmem_cache_alloc+0x28e/0x3c0 [ 610.825689] prepare_creds+0x39/0x490 [ 610.856522] lookup_user_key+0x3d7/0x10d0 [ 610.860680] ? join_session_keyring+0x300/0x300 [ 610.865347] ? key_validate+0xc0/0xc0 [ 610.869147] ? __might_fault+0x177/0x1b0 [ 610.873206] SyS_add_key+0x154/0x370 [ 610.876915] ? get_instantiation_keyring+0x180/0x180 [ 610.882012] ? SyS_read+0x210/0x210 [ 610.885634] ? do_syscall_64+0x4c/0x640 [ 610.889605] ? get_instantiation_keyring+0x180/0x180 [ 610.894706] do_syscall_64+0x1d5/0x640 [ 610.898620] entry_SYSCALL_64_after_hwframe+0x46/0xbb 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625b", 0x1e, 0xffffffffffffffff) [ 610.903824] RIP: 0033:0x45deb9 [ 610.907003] RSP: 002b:00007f4539400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 610.914712] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 610.921973] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 610.929249] RBP: 00007f4539400ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 610.936510] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 610.943815] R13: 00007fff5fe452cf R14: 00007f45394019c0 R15: 000000000118bf2c [ 610.951099] CPU: 0 PID: 10486 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 610.959103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.968484] Call Trace: [ 610.971076] dump_stack+0x1b2/0x283 [ 610.974713] should_fail.cold+0x10a/0x154 [ 610.978874] should_failslab+0xd6/0x130 [ 610.982885] kmem_cache_alloc_trace+0x29a/0x3d0 [ 610.987583] assoc_array_insert+0xb9/0x2820 [ 610.991907] ? trace_hardirqs_on+0x10/0x10 [ 610.996149] ? keyring_search_aux+0x264/0x3c0 [ 611.000647] ? fs_reclaim_release+0xd0/0x110 [ 611.005064] ? assoc_array_cancel_edit+0x80/0x80 [ 611.009822] ? lock_acquire+0x170/0x3f0 [ 611.013893] ? __key_link_begin+0x8b/0x2b0 [ 611.018136] __key_link_begin+0x106/0x2b0 [ 611.022293] key_create_or_update+0x3c5/0xaa0 [ 611.026792] ? creds_are_invalid+0xe4/0x100 [ 611.031137] ? key_alloc+0xf80/0xf80 [ 611.034871] ? __might_fault+0x177/0x1b0 [ 611.038949] SyS_add_key+0x186/0x370 [ 611.042665] ? get_instantiation_keyring+0x180/0x180 [ 611.047792] ? SyS_read+0x210/0x210 [ 611.051429] ? do_syscall_64+0x4c/0x640 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) [ 611.055407] ? get_instantiation_keyring+0x180/0x180 [ 611.060773] do_syscall_64+0x1d5/0x640 [ 611.064667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 611.069854] RIP: 0033:0x45deb9 [ 611.073042] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 611.080772] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 611.088048] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 611.095321] RBP: 00007ff3dc0f5ca0 R08: 0000000005e2994f R09: 0000000000000000 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dc", 0xf, 0xffffffffffffffff) 18:27:44 executing program 1 (fault-call:0 fault-nth:2): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:44 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) [ 611.102589] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000003 [ 611.109859] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:44 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240", 0x17, 0xffffffffffffffff) 18:27:44 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4", 0x23, 0xffffffffffffffff) 18:27:45 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240", 0x17, 0xffffffffffffffff) 18:27:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r3, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) [ 611.230029] FAULT_INJECTION: forcing a failure. [ 611.230029] name failslab, interval 1, probability 0, space 0, times 0 [ 611.246263] CPU: 0 PID: 10512 Comm: syz-executor.1 Not tainted 4.14.209-syzkaller #0 [ 611.254209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.263590] Call Trace: [ 611.266186] dump_stack+0x1b2/0x283 [ 611.269869] should_fail.cold+0x10a/0x154 [ 611.274038] should_failslab+0xd6/0x130 [ 611.278019] kmem_cache_alloc_trace+0x29a/0x3d0 [ 611.282697] aa_alloc_task_context+0x4d/0x90 [ 611.287122] apparmor_cred_prepare+0x1a/0xb0 [ 611.291538] security_prepare_creds+0x76/0xb0 [ 611.296070] prepare_creds+0x2ef/0x490 [ 611.299964] lookup_user_key+0x3d7/0x10d0 [ 611.304122] ? join_session_keyring+0x300/0x300 [ 611.308829] ? key_validate+0xc0/0xc0 [ 611.312669] ? __might_fault+0x177/0x1b0 [ 611.316740] SyS_add_key+0x154/0x370 [ 611.320463] ? get_instantiation_keyring+0x180/0x180 [ 611.325563] ? SyS_read+0x210/0x210 [ 611.329191] ? do_syscall_64+0x4c/0x640 [ 611.333171] ? get_instantiation_keyring+0x180/0x180 [ 611.338291] do_syscall_64+0x1d5/0x640 [ 611.342296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 611.347540] RIP: 0033:0x45deb9 [ 611.350728] RSP: 002b:00007f4539400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 611.358450] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 611.365708] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 611.372985] RBP: 00007f4539400ca0 R08: ffffffffffffffff R09: 0000000000000000 18:27:45 executing program 2 (fault-call:2 fault-nth:4): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:45 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) 18:27:45 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:45 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240", 0x17, 0xffffffffffffffff) 18:27:45 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000000)={0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) socketpair(0x1f, 0x80803, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000280)=""/103, 0x67, &(0x7f0000000300)=""/153, 0x1, 0xa44e3321721039ef}}, 0x48) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0c00030004000000000000000e00060028a71205"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044054) 18:27:45 executing program 1 (fault-call:0 fault-nth:3): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) [ 611.380252] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000002 [ 611.387522] R13: 00007fff5fe452cf R14: 00007f45394019c0 R15: 000000000118bf2c 18:27:45 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:45 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:45 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e4", 0x1b, 0xffffffffffffffff) [ 611.480726] FAULT_INJECTION: forcing a failure. [ 611.480726] name failslab, interval 1, probability 0, space 0, times 0 [ 611.481124] FAULT_INJECTION: forcing a failure. [ 611.481124] name failslab, interval 1, probability 0, space 0, times 0 18:27:45 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000000)={0x1, {0x0, 0x0, 0x0}}, 0x48) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x46400, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x4, &(0x7f0000000180), 0x0, r2, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000, 0x0) [ 611.539305] CPU: 1 PID: 10534 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 611.547230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.556614] Call Trace: [ 611.559219] dump_stack+0x1b2/0x283 [ 611.562860] should_fail.cold+0x10a/0x154 [ 611.567020] should_failslab+0xd6/0x130 [ 611.571000] kmem_cache_alloc_trace+0x29a/0x3d0 [ 611.575683] assoc_array_insert+0x31c/0x2820 [ 611.580101] ? trace_hardirqs_on+0x10/0x10 [ 611.584344] ? keyring_search_aux+0x264/0x3c0 [ 611.588843] ? fs_reclaim_release+0xd0/0x110 [ 611.593260] ? assoc_array_cancel_edit+0x80/0x80 [ 611.598017] ? lock_acquire+0x170/0x3f0 [ 611.601996] ? __key_link_begin+0x8b/0x2b0 [ 611.606242] __key_link_begin+0x106/0x2b0 [ 611.612911] key_create_or_update+0x3c5/0xaa0 [ 611.617442] ? creds_are_invalid+0xe4/0x100 [ 611.621767] ? key_alloc+0xf80/0xf80 [ 611.625505] ? __might_fault+0x177/0x1b0 [ 611.629565] SyS_add_key+0x186/0x370 [ 611.633276] ? get_instantiation_keyring+0x180/0x180 [ 611.638381] ? SyS_read+0x210/0x210 [ 611.642025] ? do_syscall_64+0x4c/0x640 [ 611.646025] ? get_instantiation_keyring+0x180/0x180 [ 611.651144] do_syscall_64+0x1d5/0x640 [ 611.655164] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 611.660345] RIP: 0033:0x45deb9 [ 611.663530] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 611.671842] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 611.679104] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 611.686366] RBP: 00007ff3dc0f5ca0 R08: 000000001c24a89e R09: 0000000000000000 [ 611.693663] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000004 [ 611.700929] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 611.708210] CPU: 0 PID: 10537 Comm: syz-executor.1 Not tainted 4.14.209-syzkaller #0 [ 611.716106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.725470] Call Trace: [ 611.728063] dump_stack+0x1b2/0x283 [ 611.731701] should_fail.cold+0x10a/0x154 [ 611.735865] should_failslab+0xd6/0x130 [ 611.739848] kmem_cache_alloc+0x28e/0x3c0 [ 611.744022] key_alloc+0x328/0xf80 [ 611.747583] ? key_user_lookup+0x470/0x470 [ 611.751830] ? aa_dup_task_context+0x131/0x1b0 [ 611.756421] keyring_alloc+0x42/0xa0 [ 611.760148] lookup_user_key+0x48e/0x10d0 [ 611.764316] ? join_session_keyring+0x300/0x300 [ 611.768993] ? key_validate+0xc0/0xc0 [ 611.772901] ? __might_fault+0x177/0x1b0 [ 611.777232] SyS_add_key+0x154/0x370 [ 611.780953] ? get_instantiation_keyring+0x180/0x180 [ 611.786069] ? SyS_read+0x210/0x210 [ 611.789708] ? do_syscall_64+0x4c/0x640 [ 611.793718] ? get_instantiation_keyring+0x180/0x180 [ 611.798832] do_syscall_64+0x1d5/0x640 [ 611.802763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 611.807957] RIP: 0033:0x45deb9 [ 611.811180] RSP: 002b:00007f4539400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 611.818901] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 611.826180] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 611.833495] RBP: 00007f4539400ca0 R08: ffffffffffffffff R09: 0000000000000000 18:27:45 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:45 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b7", 0x26, 0xffffffffffffffff) 18:27:45 executing program 2 (fault-call:2 fault-nth:5): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:45 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e4", 0x1b, 0xffffffffffffffff) 18:27:45 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) [ 611.840772] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000003 [ 611.848077] R13: 00007fff5fe452cf R14: 00007f45394019c0 R15: 000000000118bf2c 18:27:45 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:45 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={0x0}}, 0x41) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x72}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0xa7, 0x20, 0x20, 0x4}}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x2}, {0x4}, {0x48}, {0x4}, {0x2, 0x1}, {0x9, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x36}, {0x30}, {0x3d}, {0x6c}, {0x16}, {0x5}, {0x30, 0x1}, {0x60}, {0x48, 0x1}, {0x1}, {0x1b}, {0x0, 0x1}, {0x9}, {0x5, 0x1}, {0x9, 0x1}, {0x12}, {0x18, 0x1}, {0x4}, {0x12, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x80}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x98}]}, @NL80211_ATTR_HIDDEN_SSID={0x12, 0x7e, @random="4839e25beb7ea4da1cef98e3dff4"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0x6, 0x7f}) [ 611.921507] FAULT_INJECTION: forcing a failure. [ 611.921507] name failslab, interval 1, probability 0, space 0, times 0 [ 611.966101] CPU: 1 PID: 10564 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 611.974019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.983413] Call Trace: [ 611.986025] dump_stack+0x1b2/0x283 [ 611.989664] should_fail.cold+0x10a/0x154 [ 611.993793] FAULT_INJECTION: forcing a failure. [ 611.993793] name failslab, interval 1, probability 0, space 0, times 0 [ 611.993820] should_failslab+0xd6/0x130 [ 612.008973] kmem_cache_alloc+0x28e/0x3c0 [ 612.013122] key_alloc+0x328/0xf80 [ 612.016672] ? key_user_lookup+0x470/0x470 [ 612.020914] key_create_or_update+0x59f/0xaa0 [ 612.025409] ? key_alloc+0xf80/0xf80 [ 612.029136] ? __might_fault+0x177/0x1b0 [ 612.033219] SyS_add_key+0x186/0x370 [ 612.036949] ? get_instantiation_keyring+0x180/0x180 [ 612.042050] ? SyS_read+0x210/0x210 [ 612.045791] ? do_syscall_64+0x4c/0x640 [ 612.049765] ? get_instantiation_keyring+0x180/0x180 [ 612.054872] do_syscall_64+0x1d5/0x640 [ 612.058787] entry_SYSCALL_64_after_hwframe+0x46/0xbb 18:27:45 executing program 1 (fault-call:0 fault-nth:4): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:45 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e4", 0x1b, 0xffffffffffffffff) 18:27:45 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) [ 612.064514] RIP: 0033:0x45deb9 [ 612.067695] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 612.075400] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 612.082667] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 612.089934] RBP: 00007ff3dc0f5ca0 R08: 0000000022fec5f1 R09: 0000000000000000 [ 612.097219] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000005 [ 612.104500] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c [ 612.111800] CPU: 0 PID: 10575 Comm: syz-executor.1 Not tainted 4.14.209-syzkaller #0 [ 612.119805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.129204] Call Trace: [ 612.131805] dump_stack+0x1b2/0x283 [ 612.135442] should_fail.cold+0x10a/0x154 [ 612.139591] should_failslab+0xd6/0x130 [ 612.143570] __kmalloc_track_caller+0x2bc/0x400 [ 612.148240] ? key_alloc+0x37f/0xf80 [ 612.151958] kmemdup+0x23/0x50 [ 612.155152] key_alloc+0x37f/0xf80 [ 612.158703] ? key_user_lookup+0x470/0x470 18:27:45 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b97", 0x4, 0xffffffffffffffff) [ 612.162973] ? aa_dup_task_context+0x131/0x1b0 [ 612.167588] keyring_alloc+0x42/0xa0 [ 612.171339] lookup_user_key+0x48e/0x10d0 [ 612.175535] ? join_session_keyring+0x300/0x300 [ 612.180223] ? key_validate+0xc0/0xc0 [ 612.184046] ? __might_fault+0x177/0x1b0 [ 612.188112] SyS_add_key+0x154/0x370 [ 612.191836] ? get_instantiation_keyring+0x180/0x180 [ 612.196945] ? SyS_read+0x210/0x210 [ 612.200603] ? do_syscall_64+0x4c/0x640 [ 612.204606] ? get_instantiation_keyring+0x180/0x180 [ 612.209711] do_syscall_64+0x1d5/0x640 18:27:46 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) 18:27:46 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b97", 0x4, 0xffffffffffffffff) 18:27:46 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e44662", 0x1d, 0xffffffffffffffff) [ 612.213607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 612.218798] RIP: 0033:0x45deb9 [ 612.222010] RSP: 002b:00007f4539400c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 612.229721] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 612.237022] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 612.244326] RBP: 00007f4539400ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 612.252053] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000004 [ 612.259323] R13: 00007fff5fe452cf R14: 00007f45394019c0 R15: 000000000118bf2c 18:27:46 executing program 2 (fault-call:2 fault-nth:6): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40, 0x0) 18:27:46 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d", 0x27, 0xffffffffffffffff) 18:27:46 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b97", 0x4, 0xffffffffffffffff) 18:27:46 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeebe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80812}, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000001c0)={0xfe02, 0xa98e}) write$vhost_msg(r1, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:46 executing program 1 (fault-call:0 fault-nth:5): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) 18:27:46 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446", 0x1c, 0xffffffffffffffff) [ 612.373496] FAULT_INJECTION: forcing a failure. [ 612.373496] name failslab, interval 1, probability 0, space 0, times 0 18:27:46 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) [ 612.443424] CPU: 1 PID: 10599 Comm: syz-executor.2 Not tainted 4.14.209-syzkaller #0 [ 612.451342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.460701] Call Trace: [ 612.463303] dump_stack+0x1b2/0x283 [ 612.466969] should_fail.cold+0x10a/0x154 [ 612.471214] should_failslab+0xd6/0x130 [ 612.475201] __kmalloc_track_caller+0x2bc/0x400 [ 612.479875] ? key_alloc+0x37f/0xf80 [ 612.483589] kmemdup+0x23/0x50 [ 612.486780] key_alloc+0x37f/0xf80 [ 612.490320] ? key_user_lookup+0x470/0x470 [ 612.494550] key_create_or_update+0x59f/0xaa0 [ 612.499039] ? key_alloc+0xf80/0xf80 [ 612.502759] ? __might_fault+0x177/0x1b0 [ 612.506812] SyS_add_key+0x186/0x370 [ 612.510519] ? get_instantiation_keyring+0x180/0x180 [ 612.515759] ? SyS_read+0x210/0x210 [ 612.519383] ? do_syscall_64+0x4c/0x640 [ 612.523352] ? get_instantiation_keyring+0x180/0x180 [ 612.528475] do_syscall_64+0x1d5/0x640 [ 612.532380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 612.537563] RIP: 0033:0x45deb9 18:27:46 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:46 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446", 0x1c, 0xffffffffffffffff) 18:27:46 executing program 0 (fault-call:0 fault-nth:0): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f", 0x5, 0xffffffffffffffff) [ 612.540740] RSP: 002b:00007ff3dc0f5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 612.549322] RAX: ffffffffffffffda RBX: 00000000000007c0 RCX: 000000000045deb9 [ 612.556601] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000080 [ 612.563863] RBP: 00007ff3dc0f5ca0 R08: 00000000368c1c2d R09: 0000000000000000 [ 612.571142] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000006 [ 612.578407] R13: 00007ffc06fae58f R14: 00007ff3dc0f69c0 R15: 000000000118bf2c 18:27:46 executing program 1: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20401, 0x0) [ 612.665298] FAULT_INJECTION: forcing a failure. [ 612.665298] name failslab, interval 1, probability 0, space 0, times 0 [ 612.707625] CPU: 0 PID: 10623 Comm: syz-executor.0 Not tainted 4.14.209-syzkaller #0 [ 612.715549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.724911] Call Trace: [ 612.727507] dump_stack+0x1b2/0x283 [ 612.731153] should_fail.cold+0x10a/0x154 [ 612.735314] should_failslab+0xd6/0x130 [ 612.739317] kmem_cache_alloc_node_trace+0x25a/0x400 [ 612.744427] __kmalloc_node+0x38/0x70 [ 612.748249] kvmalloc_node+0x46/0xd0 [ 612.751970] SyS_add_key+0x253/0x370 [ 612.755696] ? get_instantiation_keyring+0x180/0x180 [ 612.760802] ? SyS_read+0x210/0x210 [ 612.764430] ? do_syscall_64+0x4c/0x640 [ 612.768402] ? get_instantiation_keyring+0x180/0x180 [ 612.773526] do_syscall_64+0x1d5/0x640 [ 612.777401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 612.782599] RIP: 0033:0x45deb9 [ 612.785771] RSP: 002b:00007fa801973c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 612.793459] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 18:27:46 executing program 2 (fault-call:2 fault-nth:7): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r1) 18:27:46 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000080)=""/31, 0x1f}], 0x4, &(0x7f00000001c0)=""/9, 0x9}, 0x20) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:46 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:46 executing program 3: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446", 0x1c, 0xffffffffffffffff) 18:27:46 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000002440)='dns_resolver\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='@:!#\x00', r0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000140)={0x0, "5ac0c9d535e33a2fc81571c67fb0e13422ff75b7a4d68b3b14f4bd31bf6f197749f52c77fa0eae1c7280bcbf9f519d72ebf40531978a38db1b67204a41ec3e28", 0x40}, 0x48, r0) keyctl$search(0xa, r2, &(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x0}, r1) [ 612.801772] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 612.809023] RBP: 00007fa801973ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 612.816291] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 612.823566] R13: 00007ffeda1d10ef R14: 00007fa8019749c0 R15: 000000000118bf2c 18:27:46 executing program 0 (fault-call:0 fault-nth:1): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f", 0x5, 0xffffffffffffffff) 18:27:46 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:46 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x343080, 0x0) getpeername$netrom(r0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000004c0)={0x0, 0xcf31, 0xcdb5, &(0x7f0000000480)=0x40}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$fscrypt_v1(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000180)={0x0, "e9534ba3c459ebe11628a767f306818545a832a83837f8da0d9e1b05791da5ebc4a82622e669e693bc3fada42ef5ad6a7806f1a18de59cf41a8125e05de8783b"}, 0x48, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000200)={0x0, "e992675a8685e601100d166f15bf689ef6645b63fa8b610d37892d07236f5fe22e8e46c906f3210e2ae37e2f4c2d0f6189b654ca4d6bc21db99e446c93a4745e", 0x35}, 0x48, r3) r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r6, 0x614, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x31d1, 0x7}}}}, [@NL80211_ATTR_TESTDATA={0x57, 0x45, "0daeb96447c439febff03f60b7c79ef34fe6ba49326d8968aa69a9bfcafa912d2fa7500826c4d3b165fdda61b70b139b1642cdd8bbc6953b87ab58743964b2e37aada2c6ac1c2f634cd1428fdb7b9b8ee913eb"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) request_key(&(0x7f0000000500)='syzkaller\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='keyring\x00', r4) keyctl$link(0x8, 0x0, r5) 18:27:46 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000080)=""/31, 0x1f}], 0x4, &(0x7f00000001c0)=""/9, 0x9}, 0x20) write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48) 18:27:46 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000040)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 18:27:46 executing program 1: r0 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="4af84b977f326ff78631c2c09f28dcea89e627427a8240408b10e446625bc0517128c4cc19b71d55", 0x28, 0xffffffffffffffff) add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000180)={0x0, 0x100000001}) [ 612.910941] FAULT_INJECTION: forcing a failure. [ 612.910941] name failslab, interval 1, probability 0, space 0, times 0 [ 612.988724] CPU: 0 PID: 10648 Comm: syz-executor.0 Not tainted 4.14.209-syzkaller #0 [ 612.996650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.006119] Call Trace: [ 613.008714] dump_stack+0x1b2/0x283 [ 613.012354] should_fail.cold+0x10a/0x154 [ 613.016511] should_failslab+0xd6/0x130 [ 613.016544] kasan: CONFIG_KASAN_INLINE enabled [ 613.020493] kmem_cache_alloc+0x28e/0x3c0 [ 613.020508] prepare_creds+0x39/0x490 [ 613.020520] lookup_user_key+0x3d7/0x10d0 [ 613.020533] ? join_session_keyring+0x300/0x300 [ 613.020545] ? key_validate+0xc0/0xc0 [ 613.028006] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 613.029377] ? __might_fault+0x177/0x1b0 [ 613.029392] SyS_add_key+0x154/0x370 [ 613.029404] ? get_instantiation_keyring+0x180/0x180 [ 613.029416] ? SyS_read+0x210/0x210 [ 613.033299] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 613.037339] ? do_syscall_64+0x4c/0x640 [ 613.041979] Modules linked in: [ 613.045973] ? get_instantiation_keyring+0x180/0x180 [ 613.057404] do_syscall_64+0x1d5/0x640 [ 613.061113] CPU: 1 PID: 10658 Comm: syz-executor.4 Not tainted 4.14.209-syzkaller #0 [ 613.066204] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 613.069820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.076033] RIP: 0033:0x45deb9 [ 613.080028] task: ffff8880984a2280 task.stack: ffff88809c0b8000 [ 613.083200] RSP: 002b:00007fa801973c78 EFLAGS: 00000246 [ 613.088305] RIP: 0010:vhost_chr_write_iter+0x863/0x10f0 [ 613.092168] ORIG_RAX: 00000000000000f8 [ 613.100046] RSP: 0018:ffff88809c0bfc00 EFLAGS: 00010246 [ 613.105426] RAX: ffffffffffffffda RBX: 0000000000000740 RCX: 000000000045deb9 [ 613.118069] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 613.124106] RAX: dffffc0000000000 RBX: ffff8880732e84c0 RCX: 0000000000000000 [ 613.129534] RBP: 00007fa801973ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 613.135063] RDX: 0000000000000002 RSI: ffffffff85985d15 RDI: ffff8880732e8580 [ 613.139039] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 18:27:46 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:47 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:47 executing program 5: add_key(0x0, 0x0, &(0x7f00000000c0)="4af84b", 0x3, 0xffffffffffffffff) 18:27:47 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 613.144380] RBP: ffffed100e65d0a9 R08: 0000000000000000 R09: 00000000000406ca [ 613.151633] R13: 00007ffeda1d10ef R14: 00007fa8019749c0 R15: 000000000118bf2c [ 613.158989] R10: ffff8880984a2b58 R11: ffff8880984a2280 R12: 0000000000000002 [ 613.209852] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff11013817f87 [ 613.217122] FS: 00007f8287ccc700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 613.225347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.231228] CR2: 00000000004de0f0 CR3: 00000000a8cbe000 CR4: 00000000001406e0 18:27:47 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 18:27:47 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 613.238504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 613.245771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 613.253033] Call Trace: [ 613.255710] ? log_write_hva+0x310/0x310 [ 613.259779] ? trace_hardirqs_on+0x10/0x10 [ 613.264011] ? iov_iter_init+0xa6/0x1c0 [ 613.268076] __vfs_write+0x44c/0x630 [ 613.271792] ? __might_fault+0x104/0x1b0 [ 613.275860] ? kernel_read+0x110/0x110 [ 613.279783] ? rw_verify_area+0xe1/0x2a0 [ 613.283851] vfs_write+0x17f/0x4d0 [ 613.287395] SyS_write+0xf2/0x210 [ 613.290854] ? SyS_read+0x210/0x210 [ 613.294829] ? SyS_clock_settime+0x1a0/0x1a0 [ 613.299238] ? do_syscall_64+0x4c/0x640 [ 613.303221] ? SyS_read+0x210/0x210 [ 613.306847] do_syscall_64+0x1d5/0x640 [ 613.310742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 613.315930] RIP: 0033:0x45deb9 [ 613.319112] RSP: 002b:00007f8287ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 613.326821] RAX: ffffffffffffffda RBX: 000000000003b980 RCX: 000000000045deb9 [ 613.334110] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000004 [ 613.341445] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 613.348732] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 613.355995] R13: 00007ffd4c3d0b4f R14: 00007f8287ccc9c0 R15: 000000000118bf2c [ 613.363247] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 cd 06 00 00 4c 8b ab c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 <80> 3c 01 00 0f 85 96 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 613.382353] RIP: vhost_chr_write_iter+0x863/0x10f0 RSP: ffff88809c0bfc00 [ 613.400467] ---[ end trace e46de74b335ebd9d ]--- [ 613.405492] Kernel panic - not syncing: Fatal exception [ 613.411443] Kernel Offset: disabled [ 613.415059] Rebooting in 86400 seconds..