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"}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000020c0)='NLBL_CALIPSO\x00') ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x3, 0x1000, 0xf9, &(0x7f0000000140)="0bfb339b8e74136eb2f144a307efac02817ec1ede837f21c9e9f04eba8f68e936b1c9faaba874f9d6760893629b99d9b9565be48d01c1f2495ce7587288c8c79e16e224f603a1452270647c49e3e5a82087754325cccadb55afbff174cf2882e6f029a52a8f038811fa5c92afbff9d1b03ae17f7b4db431334fd6b40d4147535f095dae193c20b41070a14043e327798a4a94e812250aa8fba10630af3258e8335d0fb139965ddbc9c76c07de97a17110a6a5d402e523679056b14fa6b77f444f609532fd28bff8b25cc7d0283c53c05a731b064a35fd7d83fe976bfda0923075ff901f16930bbcdb6a48ae1168d60426dc7bf02f8078158f5", 0x1000, 0x0, &(0x7f00000021c0)="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"}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r2, 0x8, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x8, 0x50b92c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xde0000bb6b8a046}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x29, 0x1, 0x1c, 0x4, 0x4b, @empty, @local, 0x1, 0x7800, 0x1, 0x8}}) 14:56:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) 14:56:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 14:56:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000080)) 14:56:50 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x1001) 14:56:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0\x00', 0x0}) 14:56:51 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000600)=""/246, 0x2a, 0xf6, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x10, &(0x7f00000000c0)={&(0x7f0000000000)=""/155, 0x9b}}, 0x10) 14:56:51 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xffffffba}, 0x8) 14:56:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', 0x0}) 14:56:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) 14:56:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) 14:56:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000100)) 14:56:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x17, 0x0, 0x0) 14:56:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 14:56:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 14:56:51 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x13, 0x0, &(0x7f0000000340)) 14:56:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000000)=0x31) 14:56:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x10}}], 0x10}, 0x0) 14:56:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1600bd77, 0x0, 0x0) 14:56:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 14:56:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 14:56:51 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd60c9816a0014"], 0x0) 14:56:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delchain={0x3c, 0x65, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) 14:56:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000000)="77fce0cc8951566258645eb9bef4743fa0beaa92e82a029f", 0x18, 0x0, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x3}, 0x80) 14:56:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000040), 0x4) 14:56:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x325, 0x0, 0x0, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) 14:56:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001200)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 14:56:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0c4) 14:56:51 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x13, 0x0, &(0x7f0000000040)=0x5e) 14:56:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 14:56:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x891f, &(0x7f00000000c0)={"1465ea3fde3aa75093c3c10fea58badf"}) 14:56:52 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9c) 14:56:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000180)={0x11, 0x6}, 0x14) 14:56:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), 0x4) 14:56:52 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) connect(r0, &(0x7f0000000140)=@ipx={0x4, 0x0, 0x0, "98993c99c144"}, 0x80) 14:56:52 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f0000001580), 0x40) 14:56:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x13, 0x8, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 14:56:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xa, &(0x7f0000000040), 0x4) 14:56:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 14:56:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 14:56:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e00)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r1, 0x611}, 0x14}}, 0x0) 14:56:52 executing program 1: socketpair(0xa, 0x803, 0x9, &(0x7f0000000080)) 14:56:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2, {[@timestamp={0x44, 0x4}]}}}}}) 14:56:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 14:56:52 executing program 4: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 14:56:52 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x1d, 0x0, 0x0) 14:56:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0xe0}]}}, &(0x7f0000000600)=""/246, 0x2a, 0xf6, 0x1}, 0x20) 14:56:52 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x6, 0x0, 0x0) 14:56:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x7bcc4000) 14:56:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8901, &(0x7f0000000100)={'batadv0\x00'}) 14:56:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_pauseparam={0x12}}) 14:56:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) 14:56:52 executing program 5: unshare(0x400) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') 14:56:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(xtea-generic)\x00'}, 0x58) 14:56:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_macvtap\x00'}) 14:56:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 14:56:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8970, &(0x7f0000000000)={'batadv_slave_0\x00'}) 14:56:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1280055}) 14:56:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 14:56:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f0000000040)) 14:56:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:56:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x13, 0x8, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x40) 14:56:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, &(0x7f0000000600)=""/246, 0x32, 0xf6, 0x1}, 0x20) 14:56:53 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd60c9816a0014060000210000000000000000000001", @ANYRES32=0x41424344], 0x0) 14:56:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001380)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:56:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}) 14:56:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 14:56:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5450, 0x0) 14:56:53 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd60c9816a001406"], 0x0) 14:56:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000004c0)='GPL\x00', 0x1, 0xf7, &(0x7f0000000500)=""/247, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:56:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:56:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000480)=@raw=[@alu], &(0x7f00000004c0)='GPL\x00', 0x2, 0xf7, &(0x7f0000000500)=""/247, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:56:53 executing program 3: syz_emit_ethernet(0x200001aa, &(0x7f0000000180)={@link_local, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="d99be89c1464", @empty, @remote, @loopback}}}}, 0x0) 14:56:53 executing program 0: 14:56:53 executing program 2: 14:56:53 executing program 1: 14:56:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x15, 0x9, 0x6, @dev={0xfe, 0x80, [], 0x3b}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10, 0x80, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0xbb, 0xbc, 0xd47, 0x58, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x10, 0x700, 0xeb, 0x485e}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x81, 0x9, 0x10, @mcast1, @private0={0xfc, 0x0, [], 0x1}, 0x8, 0x7, 0x3, 0x5}}) socket$packet(0x11, 0x3, 0x300) 14:56:53 executing program 2: unshare(0x400) bpf$BPF_BTF_GET_NEXT_ID(0x2, 0x0, 0x0) 14:56:53 executing program 5: socketpair(0x2c, 0x803, 0x9, &(0x7f0000000080)) 14:56:53 executing program 1: 14:56:53 executing program 0: 14:56:53 executing program 3: 14:56:53 executing program 4: 14:56:54 executing program 0: 14:56:54 executing program 3: 14:56:54 executing program 1: 14:56:54 executing program 2: 14:56:54 executing program 5: 14:56:54 executing program 4: 14:56:54 executing program 0: 14:56:54 executing program 1: 14:56:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 14:56:54 executing program 5: 14:56:54 executing program 2: 14:56:54 executing program 4: 14:56:54 executing program 0: 14:56:54 executing program 5: 14:56:54 executing program 3: 14:56:54 executing program 1: 14:56:54 executing program 2: 14:56:54 executing program 4: 14:56:54 executing program 5: 14:56:54 executing program 0: 14:56:54 executing program 3: 14:56:54 executing program 1: 14:56:54 executing program 2: 14:56:54 executing program 4: 14:56:54 executing program 5: 14:56:54 executing program 3: 14:56:54 executing program 1: 14:56:54 executing program 0: 14:56:54 executing program 2: 14:56:54 executing program 5: 14:56:54 executing program 4: 14:56:54 executing program 3: 14:56:55 executing program 1: 14:56:55 executing program 0: 14:56:55 executing program 2: 14:56:55 executing program 4: 14:56:55 executing program 3: 14:56:55 executing program 5: 14:56:55 executing program 1: 14:56:55 executing program 0: 14:56:55 executing program 4: 14:56:55 executing program 2: 14:56:55 executing program 3: 14:56:55 executing program 1: 14:56:55 executing program 5: 14:56:55 executing program 0: 14:56:55 executing program 2: 14:56:55 executing program 4: 14:56:55 executing program 3: 14:56:55 executing program 1: 14:56:55 executing program 5: 14:56:55 executing program 0: 14:56:55 executing program 2: 14:56:55 executing program 4: 14:56:55 executing program 5: 14:56:55 executing program 3: 14:56:55 executing program 1: 14:56:55 executing program 0: 14:56:55 executing program 4: 14:56:55 executing program 2: 14:56:55 executing program 1: 14:56:55 executing program 0: 14:56:55 executing program 5: 14:56:55 executing program 4: 14:56:55 executing program 3: 14:56:56 executing program 2: 14:56:56 executing program 1: 14:56:56 executing program 0: 14:56:56 executing program 5: 14:56:56 executing program 4: 14:56:56 executing program 3: 14:56:56 executing program 2: 14:56:56 executing program 1: 14:56:56 executing program 0: 14:56:56 executing program 5: 14:56:56 executing program 3: 14:56:56 executing program 4: 14:56:56 executing program 1: 14:56:56 executing program 2: 14:56:56 executing program 0: 14:56:56 executing program 5: 14:56:56 executing program 3: 14:56:56 executing program 1: 14:56:56 executing program 4: 14:56:56 executing program 0: 14:56:56 executing program 2: 14:56:56 executing program 5: 14:56:56 executing program 3: 14:56:56 executing program 1: 14:56:56 executing program 4: 14:56:56 executing program 2: 14:56:56 executing program 0: 14:56:56 executing program 5: 14:56:56 executing program 1: 14:56:56 executing program 3: 14:56:56 executing program 0: 14:56:56 executing program 2: 14:56:56 executing program 4: 14:56:57 executing program 5: 14:56:57 executing program 1: 14:56:57 executing program 3: 14:56:57 executing program 2: 14:56:57 executing program 0: 14:56:57 executing program 4: 14:56:57 executing program 3: 14:56:57 executing program 5: 14:56:57 executing program 1: 14:56:57 executing program 2: 14:56:57 executing program 0: 14:56:57 executing program 4: 14:56:57 executing program 3: 14:56:57 executing program 1: 14:56:57 executing program 2: 14:56:57 executing program 5: 14:56:57 executing program 4: 14:56:57 executing program 0: 14:56:57 executing program 3: 14:56:57 executing program 1: 14:56:57 executing program 2: 14:56:57 executing program 5: 14:56:57 executing program 0: 14:56:57 executing program 4: 14:56:57 executing program 3: 14:56:58 executing program 4: 14:56:58 executing program 2: 14:56:58 executing program 3: 14:56:58 executing program 0: 14:56:58 executing program 1: 14:56:58 executing program 5: 14:56:58 executing program 0: 14:56:58 executing program 4: 14:56:58 executing program 1: 14:56:58 executing program 5: 14:56:58 executing program 2: 14:56:58 executing program 3: 14:56:58 executing program 0: 14:56:58 executing program 2: 14:56:58 executing program 4: 14:56:58 executing program 3: 14:56:58 executing program 1: 14:56:58 executing program 5: 14:56:58 executing program 2: 14:56:58 executing program 4: 14:56:58 executing program 0: 14:56:58 executing program 3: 14:56:58 executing program 1: 14:56:58 executing program 2: 14:56:58 executing program 5: 14:56:58 executing program 4: 14:56:58 executing program 0: 14:56:58 executing program 2: 14:56:58 executing program 3: 14:56:58 executing program 1: 14:56:58 executing program 5: 14:56:59 executing program 4: 14:56:59 executing program 0: 14:56:59 executing program 2: 14:56:59 executing program 3: 14:56:59 executing program 1: 14:56:59 executing program 5: 14:56:59 executing program 4: 14:56:59 executing program 0: 14:56:59 executing program 3: 14:56:59 executing program 2: 14:56:59 executing program 1: 14:56:59 executing program 4: 14:56:59 executing program 2: 14:56:59 executing program 0: 14:56:59 executing program 5: 14:56:59 executing program 1: 14:56:59 executing program 4: 14:56:59 executing program 3: 14:56:59 executing program 2: 14:56:59 executing program 4: 14:56:59 executing program 5: 14:56:59 executing program 0: 14:56:59 executing program 1: 14:56:59 executing program 3: 14:56:59 executing program 2: 14:56:59 executing program 4: 14:56:59 executing program 5: 14:56:59 executing program 0: 14:56:59 executing program 3: 14:56:59 executing program 1: 14:56:59 executing program 2: 14:56:59 executing program 0: 14:56:59 executing program 4: 14:57:00 executing program 3: 14:57:00 executing program 1: 14:57:00 executing program 5: 14:57:00 executing program 2: 14:57:00 executing program 4: 14:57:00 executing program 0: 14:57:00 executing program 3: 14:57:00 executing program 2: 14:57:00 executing program 1: 14:57:00 executing program 5: 14:57:00 executing program 0: 14:57:00 executing program 4: 14:57:00 executing program 2: 14:57:00 executing program 1: 14:57:00 executing program 3: 14:57:00 executing program 5: 14:57:00 executing program 0: 14:57:00 executing program 2: 14:57:00 executing program 4: 14:57:00 executing program 5: 14:57:00 executing program 1: 14:57:00 executing program 3: 14:57:00 executing program 4: 14:57:00 executing program 2: 14:57:00 executing program 0: 14:57:00 executing program 1: 14:57:00 executing program 5: 14:57:00 executing program 3: 14:57:00 executing program 4: 14:57:00 executing program 2: 14:57:00 executing program 0: 14:57:00 executing program 1: 14:57:01 executing program 3: 14:57:01 executing program 2: 14:57:01 executing program 5: 14:57:01 executing program 4: 14:57:01 executing program 0: 14:57:01 executing program 3: 14:57:01 executing program 1: 14:57:01 executing program 2: 14:57:01 executing program 4: 14:57:01 executing program 5: 14:57:01 executing program 0: 14:57:01 executing program 3: 14:57:01 executing program 1: 14:57:01 executing program 2: 14:57:01 executing program 3: 14:57:01 executing program 5: 14:57:01 executing program 4: 14:57:01 executing program 0: 14:57:01 executing program 1: 14:57:01 executing program 2: 14:57:01 executing program 3: 14:57:01 executing program 5: 14:57:01 executing program 4: 14:57:01 executing program 0: 14:57:01 executing program 1: 14:57:01 executing program 3: 14:57:01 executing program 2: 14:57:01 executing program 5: 14:57:01 executing program 0: 14:57:01 executing program 4: 14:57:01 executing program 1: 14:57:01 executing program 3: 14:57:01 executing program 2: 14:57:01 executing program 5: 14:57:02 executing program 0: 14:57:02 executing program 4: 14:57:02 executing program 3: 14:57:02 executing program 1: 14:57:02 executing program 2: 14:57:02 executing program 0: 14:57:02 executing program 5: 14:57:02 executing program 4: 14:57:02 executing program 3: 14:57:02 executing program 1: 14:57:02 executing program 5: 14:57:02 executing program 2: 14:57:02 executing program 0: 14:57:02 executing program 4: 14:57:02 executing program 3: 14:57:02 executing program 5: 14:57:02 executing program 1: 14:57:02 executing program 2: 14:57:02 executing program 4: 14:57:02 executing program 0: 14:57:02 executing program 5: 14:57:02 executing program 3: 14:57:02 executing program 1: 14:57:02 executing program 5: 14:57:02 executing program 2: 14:57:02 executing program 4: 14:57:02 executing program 0: 14:57:02 executing program 3: 14:57:02 executing program 1: 14:57:02 executing program 5: 14:57:02 executing program 2: 14:57:02 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000180)=""/255) 14:57:03 executing program 0: r0 = socket(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001780), 0x0, 0x10100, 0x0) 14:57:03 executing program 3: 14:57:03 executing program 1: 14:57:03 executing program 2: 14:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040080) 14:57:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc000) 14:57:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) write$nbd(r0, 0x0, 0x0) 14:57:03 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:57:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x4004094) 14:57:03 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) 14:57:03 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 14:57:03 executing program 1: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x887ed1f68c21fb1a) 14:57:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40012100, 0x0) 14:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x4c}}, 0x4080) 14:57:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132441) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 14:57:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x40040) 14:57:03 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 14:57:03 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x5451, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETXF(r1, 0x540a, 0x0) 14:57:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:57:03 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:57:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x95a1dfff275e1764, &(0x7f0000003a80)) 14:57:03 executing program 0: r0 = socket(0x10, 0x2, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) 14:57:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20008880) 14:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x6000800) 14:57:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x54) 14:57:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c800) 14:57:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) 14:57:04 executing program 1: 14:57:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000004240)={0x0, 0x0, 0x0}, 0x10060) 14:57:04 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000340)=""/4096) 14:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:57:05 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @dev}, @phonet, @in={0x2, 0x0, @loopback}}) 14:57:05 executing program 5: socket(0x10, 0x802, 0x0) 14:57:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) 14:57:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x12020) 14:57:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) 14:57:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 14:57:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) 14:57:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) 14:57:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4048010) 14:57:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x1010) 14:57:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffe21}}, 0x0) 14:57:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:57:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 14:57:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:57:05 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0xfffffffffffffffe, 0x0) 14:57:05 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000000140)=""/251) 14:57:05 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4800) 14:57:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe25}}, 0x0) 14:57:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 14:57:05 executing program 2: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:57:05 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 14:57:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 14:57:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004050) 14:57:06 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) 14:57:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:57:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x4000000) 14:57:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001780), 0x0, 0x10000, 0x0) 14:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:57:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000010) 14:57:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000010) 14:57:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:57:06 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:57:06 executing program 1: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xfd1r\xe3\xb8(\xea\x9b^\x9c\x13\x05\xf0\b\x84\xa2m\xeb\n\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xddU0\xc98M\xcd\xfb\xccJx\xaa\x82\x1b!}a\xa9\xb2\x04K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc2\xa7\xe7\xfe7\x0f\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x21c) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00') 14:57:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:06 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x200000d4) 14:57:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:57:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x8010) 14:57:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000880) 14:57:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x804) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80040}, 0x40000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20004800) pipe(&(0x7f0000000000)) r2 = gettid() ptrace$setsig(0x4203, r2, 0x8000, &(0x7f0000000440)={0x2c}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x804) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20008004) 14:57:06 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:57:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x0) 14:57:06 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 14:57:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:57:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0xb, 0x16, 0x0, 0x0}) 14:57:06 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 14:57:06 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000014) 14:57:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 14:57:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4080050) 14:57:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x44004) 14:57:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004054) 14:57:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44880) 14:57:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x90) 14:57:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040040) 14:57:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4800) 14:57:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xfffffffffffffd1d}}, 0x0) 14:57:07 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 14:57:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 14:57:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 14:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 14:57:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) 14:57:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10000, &(0x7f0000003340)) 14:57:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x40) 14:57:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:57:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x2040) 14:57:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000090) 14:57:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2400d840) 14:57:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, &(0x7f0000003a80)) 14:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x200080d6) 14:57:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1110}}, 0x4000080) 14:57:08 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4048020) 14:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x44810) 14:57:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffffff0d) 14:57:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) getpgrp(r1) 14:57:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:08 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:57:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 14:57:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040040) 14:57:08 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000), 0x1, 0x0, 0x0, 0xffffffb3) 14:57:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x95a1dfff275e1765, &(0x7f0000003a80)) 14:57:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 14:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) 14:57:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x48c0) 14:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0xc000) 14:57:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2100, 0x0) 14:57:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x2000c004) 14:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x456c}}, 0x10) 14:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c000) 14:57:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, &(0x7f0000001840)) 14:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xc0) 14:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4804) 14:57:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f0000003a80)) 14:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x840) 14:57:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, 0x0) 14:57:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 14:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x90}}, 0x0) 14:57:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040080) 14:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) 14:57:09 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:57:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x40080) 14:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) 14:57:09 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0xea60}) 14:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008096) 14:57:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) 14:57:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 14:57:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4041000) 14:57:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xd0) 14:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 14:57:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 14:57:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10100, 0x0) 14:57:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 14:57:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000000), 0xffffffffffffff84) 14:57:10 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:57:10 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x0) 14:57:10 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001780), 0x0, 0x12100, 0x0) 14:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:10 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:10 executing program 0: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x73425ccfb0a4861d) 14:57:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000000) 14:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8084) 14:57:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x95a1dfff275e1764, 0x0) 14:57:10 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x48040) 14:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040000) 14:57:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4004880) 14:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) 14:57:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 14:57:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20004084) 14:57:11 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 14:57:11 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:57:11 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:57:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12100, 0x0) 14:57:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x91abf0dd}}, 0x0) 14:57:11 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 14:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xd0}}, 0x4030) 14:57:11 executing program 2: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x2383572fcaf623ed) 14:57:11 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='n'], 0x48}}, 0x0) 14:57:11 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x0) 14:57:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x880) 14:57:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[], 0x30}}, 0x24040000) 14:57:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc0) 14:57:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x18c}}, 0x0) 14:57:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 14:57:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20004800) 14:57:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000007a00)={0x0, 0x0, &(0x7f00000079c0)={0x0}}, 0x20000084) 14:57:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001780), 0x0, 0x10100, &(0x7f0000001840)) 14:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:57:12 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 14:57:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44004) 14:57:12 executing program 0: epoll_create1(0x9447a7073638dea4) 14:57:12 executing program 1: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 14:57:12 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0, 0x5f}}, 0x0) 14:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000018cc0)={0x0, 0x0, &(0x7f0000018c80)={0x0}}, 0x0) 14:57:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10) 14:57:12 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200c0, 0x0) 14:57:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000000) 14:57:12 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 14:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20044000) 14:57:12 executing program 5: 14:57:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) 14:57:12 executing program 4: r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r0, r1) 14:57:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:57:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:57:12 executing program 5: 14:57:12 executing program 0: 14:57:12 executing program 5: 14:57:13 executing program 2: 14:57:13 executing program 3: 14:57:13 executing program 1: 14:57:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffec5, &(0x7f0000000180)={0x0, 0xfffffd49}}, 0x0) 14:57:13 executing program 0: 14:57:13 executing program 3: 14:57:13 executing program 5: 14:57:13 executing program 2: 14:57:13 executing program 0: 14:57:13 executing program 1: 14:57:13 executing program 4: 14:57:13 executing program 0: 14:57:13 executing program 5: 14:57:13 executing program 1: 14:57:13 executing program 3: 14:57:13 executing program 2: 14:57:13 executing program 4: 14:57:13 executing program 0: 14:57:13 executing program 1: 14:57:13 executing program 2: 14:57:13 executing program 5: 14:57:13 executing program 4: 14:57:13 executing program 3: 14:57:13 executing program 0: 14:57:13 executing program 1: 14:57:13 executing program 2: 14:57:13 executing program 5: 14:57:13 executing program 4: 14:57:13 executing program 3: 14:57:13 executing program 0: 14:57:13 executing program 2: 14:57:13 executing program 1: 14:57:13 executing program 5: 14:57:13 executing program 0: 14:57:13 executing program 3: 14:57:13 executing program 4: 14:57:14 executing program 2: 14:57:14 executing program 1: 14:57:14 executing program 5: 14:57:14 executing program 0: 14:57:14 executing program 3: 14:57:14 executing program 4: 14:57:14 executing program 2: 14:57:14 executing program 1: 14:57:14 executing program 0: 14:57:14 executing program 4: 14:57:14 executing program 5: 14:57:14 executing program 3: 14:57:14 executing program 2: 14:57:14 executing program 0: 14:57:14 executing program 4: 14:57:14 executing program 1: 14:57:14 executing program 5: 14:57:14 executing program 3: 14:57:14 executing program 2: 14:57:14 executing program 0: 14:57:14 executing program 1: 14:57:14 executing program 4: 14:57:14 executing program 5: 14:57:14 executing program 3: 14:57:14 executing program 2: 14:57:14 executing program 0: 14:57:15 executing program 1: 14:57:15 executing program 4: 14:57:15 executing program 2: 14:57:15 executing program 0: 14:57:15 executing program 3: 14:57:15 executing program 5: 14:57:15 executing program 3: 14:57:15 executing program 2: 14:57:15 executing program 1: 14:57:15 executing program 4: 14:57:15 executing program 0: 14:57:15 executing program 5: 14:57:15 executing program 3: 14:57:15 executing program 0: 14:57:15 executing program 2: 14:57:15 executing program 1: 14:57:15 executing program 5: 14:57:15 executing program 4: 14:57:15 executing program 3: 14:57:15 executing program 0: 14:57:15 executing program 1: 14:57:15 executing program 5: 14:57:15 executing program 2: 14:57:15 executing program 4: 14:57:15 executing program 0: 14:57:15 executing program 3: 14:57:15 executing program 1: 14:57:15 executing program 5: 14:57:15 executing program 2: 14:57:15 executing program 4: 14:57:15 executing program 3: 14:57:15 executing program 0: 14:57:15 executing program 1: 14:57:15 executing program 5: 14:57:16 executing program 2: 14:57:16 executing program 4: 14:57:16 executing program 3: 14:57:16 executing program 0: 14:57:16 executing program 1: 14:57:16 executing program 5: 14:57:16 executing program 2: 14:57:16 executing program 4: 14:57:16 executing program 3: 14:57:16 executing program 0: 14:57:16 executing program 1: 14:57:16 executing program 5: 14:57:16 executing program 2: 14:57:16 executing program 4: 14:57:16 executing program 0: 14:57:16 executing program 3: 14:57:16 executing program 1: 14:57:16 executing program 5: 14:57:16 executing program 2: 14:57:16 executing program 4: 14:57:16 executing program 3: 14:57:16 executing program 0: 14:57:16 executing program 4: 14:57:16 executing program 2: 14:57:16 executing program 1: 14:57:16 executing program 5: 14:57:16 executing program 3: 14:57:16 executing program 0: 14:57:16 executing program 4: 14:57:16 executing program 5: 14:57:16 executing program 2: 14:57:16 executing program 1: 14:57:16 executing program 3: 14:57:17 executing program 0: 14:57:17 executing program 4: 14:57:17 executing program 5: 14:57:17 executing program 1: 14:57:17 executing program 2: 14:57:17 executing program 0: 14:57:17 executing program 3: 14:57:17 executing program 4: 14:57:17 executing program 5: 14:57:17 executing program 2: 14:57:17 executing program 1: 14:57:17 executing program 3: 14:57:17 executing program 0: 14:57:17 executing program 4: 14:57:17 executing program 1: 14:57:17 executing program 5: 14:57:17 executing program 2: 14:57:17 executing program 0: 14:57:17 executing program 3: 14:57:17 executing program 4: 14:57:17 executing program 5: 14:57:17 executing program 2: 14:57:17 executing program 1: 14:57:17 executing program 0: 14:57:17 executing program 3: 14:57:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x10000, 0x4) 14:57:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3e, &(0x7f0000000040), 0x4) 14:57:17 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', 0x0}) 14:57:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=@deltfilter={0x11ec, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x11b8, 0x2, [@TCA_MATCHALL_ACT={0x11b4, 0x2, [@m_pedit={0x11b0, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x10bc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x168, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x130, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x80000001, 0x101, 0x7fffffff, 0x400, 0x1, 0x80000000}, {0x9, 0x7f, 0x3ff, 0x6, 0x0, 0x6}, {0xfff, 0xf57f, 0xffffffff, 0x30d, 0x7, 0x1}, {0xffff, 0x1, 0x80000000, 0x1, 0x9, 0x3}, {0x7, 0x40, 0x7fffffff, 0xa94, 0xda3, 0x101}, {0xfffffff9, 0x8, 0x5, 0x2, 0x7fff, 0x4}, {0x8, 0xffff, 0xff, 0x80000, 0x8, 0x15f}, {0x0, 0xd7, 0xfffffbff, 0x0, 0x7, 0x3}, {0xe7, 0x7ff, 0x3c0, 0x73, 0x14}, {0x800, 0x7, 0xa0, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x3591, 0x8, 0x1a, 0xf87}, {0x0, 0x3, 0x49f, 0x80000, 0x3f, 0x5}, {0x1800, 0x1, 0x4, 0x1, 0x6, 0x800}, {0xfffffff9, 0x0, 0x547a, 0x1, 0x3, 0x3f}, {0x62d, 0x5, 0x7, 0x4, 0x1ff, 0x8}, {0x3, 0xffffffe1, 0x6, 0x1ff, 0x6, 0x40}, {0x2, 0x6, 0x80000000, 0x800, 0x0, 0x6}, {0x3, 0x0, 0x595c, 0x5, 0x6059c7ea, 0x4}, {0x10000, 0xe, 0x6, 0x1, 0x7ff, 0x4}, {0x9, 0x1, 0x8, 0xfffffffb, 0x973, 0x7}, {0x184, 0x1, 0xfffffbff, 0x1800000, 0x6, 0x3f}, {0x2, 0x1, 0xcd, 0x8001, 0x20, 0xdf71}, {0x8000, 0x4, 0x0, 0x10001, 0x72, 0xfffffff8}, {0x9, 0x2, 0x10001, 0x9, 0x2, 0x800}, {0x6, 0x8, 0x3, 0x1, 0xfffffff8, 0x3ff}, {0x7fff, 0x6, 0x1000, 0x6, 0x5, 0x80000001}, {0x80000001, 0x1, 0x2, 0x100, 0xc5, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {}, {}, {}, {}, {0x6}, {0x2, 0x3, 0x2, 0x0, 0x6, 0x376d}, {0xac0, 0x9, 0x401, 0xfff, 0x10001, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x3, 0x5}, {}, {0x0, 0x0, 0x0, 0x7b69ff77}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1f, 0x1000, 0x4, 0x101, 0x8885, 0x3f}, {0x3f, 0xd120, 0x6, 0x4, 0x20, 0xfffffff7}, {0x8ee, 0x10001, 0x681, 0x7f, 0xffffff20, 0x3}, {0xdfb, 0x2, 0x1, 0x1ff, 0x9, 0x1}, {0x0, 0xd3de, 0x0, 0x77d0, 0x2f, 0x6}, {0x6, 0x2, 0x41d, 0x4, 0xff, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xc6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x80000001}, {}, {0x9}, {}, {0x5, 0x8, 0xfd0000}, {0x3, 0x22b, 0xeef, 0x16, 0xb928, 0x1}, {0x8b0, 0x4, 0x6, 0x571, 0x3, 0x6}, {0xa03, 0x1000, 0x4b3a616e, 0x0, 0x5, 0x100}, {0x5, 0x8, 0x0, 0xff, 0xfff, 0x1ff}, {0x0, 0x5, 0x5, 0x8, 0x4, 0x4b7}, {0x6, 0x200, 0x2f40000, 0xfffffff7, 0x2, 0x7}, {0x1, 0x6, 0xa98, 0x9, 0xfffffff8}, {0xe936, 0x800, 0xf76f, 0x8001, 0x83, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x1, 0x80955eecd21765fe}, {}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x1a61725670e75e08, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0xfe0f2ef086a98879, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0xcb, 0x6, "4c3e408aa58f97bd790149e676ed4ec19e04b4ce87939df1094b4251597e67bca2482a9f3b4e6beff7ff19445fed72bad35c2ecd7e6b26127dd47d165d05446004a1b09ca86651e5515115e9cee5b53078e9d15faa78c319b23eb4d35c815ff0ce961b8e6bddfa6153e2e501e6cfecee9e5ebc5c45007c947139006a3ee7232bd9b6a2ed8aec2878e84cae19331d7b60f6b45971428a5a8ef56e2362849611f1686c998a7d2b5078f38d7c924f631165aa7f8a9e34bb0a741af8fec2885c8951446028897ea64b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4b75ff7920384e01}}}}]}]}}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x20048040}, 0x8020014) 14:57:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34009, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005b0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) write$rfkill(r1, &(0x7f0000000040)={0xffff, 0x6, 0x1, 0x1}, 0x8) 14:57:17 executing program 3: 14:57:18 executing program 5: 14:57:18 executing program 2: 14:57:18 executing program 1: 14:57:18 executing program 4: [ 259.231637][T12611] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 259.273003][T12611] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:57:18 executing program 3: 14:57:18 executing program 0: 14:57:18 executing program 5: 14:57:18 executing program 4: 14:57:18 executing program 1: 14:57:18 executing program 2: 14:57:18 executing program 3: 14:57:18 executing program 0: 14:57:18 executing program 5: 14:57:18 executing program 2: 14:57:18 executing program 1: 14:57:18 executing program 4: 14:57:18 executing program 3: 14:57:18 executing program 5: 14:57:18 executing program 4: 14:57:18 executing program 3: 14:57:18 executing program 1: 14:57:18 executing program 2: 14:57:19 executing program 0: 14:57:19 executing program 2: 14:57:19 executing program 5: 14:57:19 executing program 3: 14:57:19 executing program 4: 14:57:19 executing program 1: 14:57:19 executing program 0: 14:57:19 executing program 2: 14:57:19 executing program 5: 14:57:19 executing program 3: 14:57:19 executing program 4: 14:57:19 executing program 1: 14:57:19 executing program 0: 14:57:19 executing program 2: 14:57:19 executing program 5: 14:57:19 executing program 4: 14:57:19 executing program 1: 14:57:19 executing program 3: 14:57:19 executing program 2: 14:57:19 executing program 5: 14:57:19 executing program 0: 14:57:19 executing program 1: 14:57:19 executing program 4: 14:57:19 executing program 3: 14:57:19 executing program 2: 14:57:19 executing program 5: 14:57:19 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) timerfd_gettime(r0, 0x0) 14:57:19 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005680)='/dev/full\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 14:57:19 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10040, 0x0) 14:57:19 executing program 1: open$dir(&(0x7f0000000300)='./file0\x00', 0x400480, 0x0) 14:57:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000080)) 14:57:19 executing program 5: 14:57:20 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000005680)='/dev/full\x00', 0x0, 0x0) 14:57:20 executing program 1: getrandom(&(0x7f0000000040)=""/33, 0x21, 0x0) 14:57:20 executing program 3: timer_create(0x0, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 14:57:20 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2a000, 0x0) 14:57:20 executing program 2: select(0x40, &(0x7f00000000c0)={0x1}, 0x0, &(0x7f0000000140)={0xffffffff}, 0x0) 14:57:20 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x3c) 14:57:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x4e000, 0x0) read(r0, &(0x7f0000000000), 0x20002000) 14:57:20 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000180)) 14:57:20 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x900003a6) restart_syscall() 14:57:20 executing program 5: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, 0x0, 0x0) 14:57:20 executing program 3: timer_create(0x0, 0x0, &(0x7f0000001cc0)) timer_gettime(0x0, &(0x7f00000000c0)) 14:57:20 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={0x0, 0x0}}, 0x0) 14:57:20 executing program 4: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 14:57:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 14:57:20 executing program 0: socket$inet6(0xa, 0x2, 0x8) 14:57:20 executing program 5: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) listen(r0, 0x0) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x3c) 14:57:20 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 14:57:20 executing program 2: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)='>', 0x1}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x90}) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x3c) 14:57:20 executing program 4: select(0x40, &(0x7f00000000c0)={0x1}, &(0x7f0000000100)={0x7}, &(0x7f0000000140), &(0x7f0000000180)) 14:57:20 executing program 5: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) timer_create(0x0, 0x0, &(0x7f0000000000)) 14:57:20 executing program 1: select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0xffffffff}, 0x0) 14:57:20 executing program 2: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 14:57:20 executing program 4: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) 14:57:20 executing program 0: timer_create(0x0, 0x0, &(0x7f0000001cc0)) openat$full(0xffffffffffffff9c, &(0x7f0000005680)='/dev/full\x00', 0x40882, 0x0) 14:57:20 executing program 5: stat(&(0x7f0000006500)='./file0\x00', 0x0) 14:57:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005680)='/dev/full\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 14:57:20 executing program 3: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x4) [ 262.089891][ T34] audit: type=1326 audit(1606057040.895:6): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12725 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7ff1549 code=0x0 14:57:21 executing program 2: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:21 executing program 4: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 14:57:21 executing program 0: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14:57:21 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getdents64(r0, 0x0, 0x0) 14:57:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:57:21 executing program 3: sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) 14:57:21 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff5000/0x2000)=nil, 0x0) 14:57:21 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) 14:57:21 executing program 4: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:57:21 executing program 1: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x90}) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x3c) 14:57:21 executing program 3: select(0x40, &(0x7f00000000c0)={0x1}, &(0x7f0000000100)={0x7}, &(0x7f0000000140)={0xffffffff}, &(0x7f0000000180)) 14:57:21 executing program 5: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 14:57:21 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10a00, 0x0) 14:57:21 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @generic={0x0, "fdff62149330185c7de28e9fa9ac"}, @tipc, @ethernet={0x0, @broadcast}}) timer_create(0x0, 0x0, &(0x7f0000000200)) 14:57:21 executing program 0: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6) 14:57:21 executing program 2: timer_create(0x2, 0x0, &(0x7f0000001cc0)) timer_gettime(0x0, &(0x7f00000000c0)) 14:57:21 executing program 3: select(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180)) 14:57:21 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 14:57:21 executing program 5: munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 14:57:21 executing program 4: clone(0x6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x3c) 14:57:21 executing program 0: geteuid() getitimer(0x1, &(0x7f0000000000)) 14:57:21 executing program 2: mincore(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0) 14:57:21 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005680)='/dev/full\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x1000040) 14:57:21 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) 14:57:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 14:57:21 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, 0x0, 0x0) 14:57:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 14:57:21 executing program 2: select(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 14:57:21 executing program 3: getgroups(0x1, &(0x7f00000007c0)=[0xffffffffffffffff]) 14:57:21 executing program 1: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000002) 14:57:22 executing program 5: mincore(&(0x7f0000ffb000/0x5000)=nil, 0x5000, &(0x7f0000000000)=""/212) 14:57:22 executing program 0: timer_create(0x2, 0x0, &(0x7f0000001cc0)) timer_delete(0x0) 14:57:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 14:57:22 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 14:57:22 executing program 1: sched_getparam(0x0, &(0x7f0000000200)) 14:57:22 executing program 3: getdents64(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 14:57:22 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x0) 14:57:22 executing program 0: select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xffffffff}, 0x0) 14:57:22 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0) 14:57:22 executing program 1: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:57:22 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 14:57:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername(r0, 0x0, 0x0) 14:57:22 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) [ 263.597631][ T34] audit: type=1326 audit(1606057042.405:7): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12835 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3f549 code=0x0 14:57:22 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 14:57:22 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x0) 14:57:22 executing program 1: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 14:57:22 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) fsync(r0) 14:57:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom(r0, 0x0, 0x0, 0x81, 0x0, 0x0) 14:57:22 executing program 5: r0 = socket(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 14:57:22 executing program 1: fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:57:22 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 14:57:22 executing program 4: open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:22 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000300)=[@rights], 0x10}, 0x0) 14:57:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights], 0xc}, 0x0) 14:57:22 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) fcntl$lock(r0, 0x4, 0x0) 14:57:22 executing program 4: openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100604, 0x0) 14:57:23 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20001, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 14:57:23 executing program 3: 14:57:23 executing program 2: r0 = socket(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) r2 = socket(0x1c, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200)=0x10) 14:57:23 executing program 0: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:57:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x9}, 0xa0) 14:57:23 executing program 1: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000001700)='./file0\x00', 0x200, 0x0) 14:57:23 executing program 3: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x410, 0xffffffffffffffff, 0x0) 14:57:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x220}, 0x10) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)='m', 0x1}], 0x1) 14:57:23 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20101, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 14:57:23 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) fstat(r0, &(0x7f0000000100)) 14:57:23 executing program 2: r0 = socket(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x104, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:57:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x220}, 0x10) writev(r1, 0x0, 0x0) 14:57:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x220}, 0x10) writev(r1, 0x0, 0x0) 14:57:23 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x8, 0x1}, 0x8, 0x0}, 0x0) 14:57:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000100), &(0x7f0000000180)=0x8) 14:57:23 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0xfffffffe}}, 0x0) 14:57:23 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') 14:57:23 executing program 5: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:23 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:57:23 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 14:57:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000040)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000080)=[@cred], 0x18}, 0x0) 14:57:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="ec", 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000500)='@', 0x1}], 0x1}, 0x0) 14:57:23 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:57:23 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x400, &(0x7f0000000000), 0x4) 14:57:23 executing program 4: r0 = open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) fstat(r0, &(0x7f0000000080)) open$dir(0x0, 0x0, 0x0) 14:57:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) r2 = dup(r1) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="cbb0da6f2508d741fc18674499719fa43ca65ff6f8e24db93e4d90e241c4ba91b51c2358415af2fb1dd88efdf3efcda1253f09473ad1e6b3cc6bdc20ccee0ce6977d9c9fca33e193bde6c1d741d1e485f4cbcfe7c881eb664f32cc65f909a19af4fb98415bdc6e201a4b6896a5fd6679c57d23a524b56c51236376cdc4e27b77df70f51c25a256f6e34fddcb239d60d0f269b7c93ac21eb9e2d6e091b277d00ae84448a6d22f2964ebbbea020985bdd31d06b90db29207dfb1f6b8d7fd82c066524a0acd39ae41fb1b3dce487c91fc3a023b1992930308494490fc7d890d8f95a4031a8421d64d28871f4fcdc6401dea", 0xf0}], 0x2) 14:57:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0}, 0x0) 14:57:24 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x40000, 0x0) 14:57:24 executing program 2: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) sendmsg(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x410, 0xffffffffffffffff, 0x0) [ 265.341308][T12971] sctp: failed to load transform for md5: -2 14:57:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000140), &(0x7f0000000080)=0xa0) 14:57:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000080)={@multicast1, @loopback}, 0xc) 14:57:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:57:24 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 14:57:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0x3ff, 0x4) 14:57:24 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) 14:57:24 executing program 4: open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000001700)='./file0\x00', 0x200, 0x0) 14:57:24 executing program 5: fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:57:24 executing program 1: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000000)={0x2}, 0x1) 14:57:24 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000)=0x402, 0x4) 14:57:24 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 14:57:24 executing program 2: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 14:57:24 executing program 4: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 14:57:24 executing program 5: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:24 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) 14:57:24 executing program 0: open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 14:57:24 executing program 1: fcntl$lock(0xffffffffffffffff, 0x12, 0x0) 14:57:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000080)={@multicast1, @broadcast}, 0xffe7dca33c9c5dbe) 14:57:24 executing program 2: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x200, 0x0) 14:57:24 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) 14:57:24 executing program 5: fcntl$lock(0xffffffffffffffff, 0x3, 0x0) 14:57:24 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x200, 0x0) 14:57:24 executing program 1: r0 = socket(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0xc) 14:57:25 executing program 4: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 14:57:25 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0xfbc2c0ab33205d5c, 0x0) 14:57:25 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:25 executing program 5: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0xfbc2c0ab33205d5e, 0x0) 14:57:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0xa, 0x0}, 0x40005) 14:57:25 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:25 executing program 1: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) 14:57:25 executing program 3: fcntl$lock(0xffffffffffffffff, 0x11, 0x0) 14:57:25 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 14:57:25 executing program 0: open$dir(&(0x7f0000001700)='.\x00', 0x1, 0x0) 14:57:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000)=0x100003ff, 0x4) 14:57:25 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001580)='./file0\x00', 0x1, 0x0) 14:57:25 executing program 1: unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) 14:57:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xb, 0x0, 0x0) 14:57:25 executing program 2: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x700b81, 0x0) 14:57:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000840000000a00000000000000000000000000000000000082"], 0x1c}, 0x0) 14:57:25 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000140), 0x4) 14:57:25 executing program 0: fcntl$lock(0xffffffffffffffff, 0x10, 0x0) 14:57:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000240), &(0x7f0000000280)=0xa) 14:57:25 executing program 4: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fcntl$lock(r0, 0xa, 0x0) 14:57:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x5, &(0x7f00000006c0)={@empty, @multicast2}, 0xc) 14:57:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 14:57:25 executing program 3: chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x0) 14:57:25 executing program 1: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') 14:57:25 executing program 4: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x40) open$dir(&(0x7f0000001700)='./file0\x00', 0x40000, 0x0) 14:57:25 executing program 5: open$dir(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000001700)='./file0\x00', 0x200, 0x0) 14:57:26 executing program 2: mincore(&(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/236) 14:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x1) 14:57:26 executing program 3: open$dir(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) 14:57:26 executing program 1: fcntl$lock(0xffffffffffffffff, 0x5, 0x0) 14:57:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000040)=@in6={0x0, 0x1c}, 0x10, 0x0}, 0x0) 14:57:26 executing program 4: open$dir(&(0x7f0000001680)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x4000c0, 0x0) 14:57:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 14:57:26 executing program 0: 14:57:26 executing program 1: 14:57:26 executing program 4: 14:57:26 executing program 3: 14:57:26 executing program 5: r0 = socket(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) r1 = socket(0x1c, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000040)={r2}, 0x8) 14:57:26 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0xffffffffffffff99, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:57:26 executing program 0: 14:57:26 executing program 4: 14:57:26 executing program 1: 14:57:26 executing program 3: 14:57:26 executing program 0: 14:57:26 executing program 4: 14:57:26 executing program 2: 14:57:26 executing program 3: 14:57:26 executing program 1: 14:57:26 executing program 5: 14:57:26 executing program 0: 14:57:26 executing program 1: 14:57:26 executing program 2: 14:57:26 executing program 3: 14:57:26 executing program 4: 14:57:26 executing program 5: 14:57:27 executing program 1: 14:57:27 executing program 0: 14:57:27 executing program 2: 14:57:27 executing program 4: 14:57:27 executing program 3: 14:57:27 executing program 5: 14:57:27 executing program 0: 14:57:27 executing program 1: 14:57:27 executing program 2: 14:57:27 executing program 3: 14:57:27 executing program 4: 14:57:27 executing program 5: 14:57:27 executing program 0: 14:57:27 executing program 2: 14:57:27 executing program 3: 14:57:27 executing program 1: 14:57:27 executing program 4: 14:57:27 executing program 0: 14:57:27 executing program 5: 14:57:27 executing program 2: 14:57:27 executing program 3: 14:57:27 executing program 4: 14:57:27 executing program 1: 14:57:27 executing program 0: 14:57:27 executing program 5: 14:57:27 executing program 2: 14:57:27 executing program 3: 14:57:27 executing program 4: 14:57:27 executing program 1: 14:57:27 executing program 0: 14:57:27 executing program 2: 14:57:27 executing program 5: 14:57:28 executing program 3: 14:57:28 executing program 1: 14:57:28 executing program 4: 14:57:28 executing program 0: 14:57:28 executing program 2: 14:57:28 executing program 5: 14:57:28 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 14:57:28 executing program 1: 14:57:28 executing program 4: 14:57:28 executing program 0: 14:57:28 executing program 2: 14:57:28 executing program 4: 14:57:28 executing program 5: 14:57:28 executing program 1: 14:57:28 executing program 0: 14:57:28 executing program 3: 14:57:28 executing program 5: 14:57:28 executing program 1: 14:57:28 executing program 2: 14:57:28 executing program 4: 14:57:28 executing program 0: 14:57:28 executing program 3: 14:57:28 executing program 5: 14:57:28 executing program 1: 14:57:28 executing program 2: 14:57:28 executing program 4: 14:57:28 executing program 0: 14:57:28 executing program 3: 14:57:28 executing program 5: 14:57:28 executing program 1: 14:57:28 executing program 4: 14:57:28 executing program 2: 14:57:28 executing program 0: 14:57:29 executing program 3: 14:57:29 executing program 1: 14:57:29 executing program 2: 14:57:29 executing program 4: 14:57:29 executing program 3: 14:57:29 executing program 0: 14:57:29 executing program 5: 14:57:29 executing program 1: 14:57:29 executing program 2: 14:57:29 executing program 0: 14:57:29 executing program 4: 14:57:29 executing program 5: 14:57:29 executing program 3: 14:57:29 executing program 2: 14:57:29 executing program 1: 14:57:29 executing program 4: 14:57:29 executing program 0: 14:57:29 executing program 5: 14:57:29 executing program 3: 14:57:29 executing program 1: 14:57:29 executing program 2: 14:57:29 executing program 0: 14:57:29 executing program 3: 14:57:29 executing program 4: 14:57:29 executing program 5: 14:57:29 executing program 1: 14:57:29 executing program 2: 14:57:30 executing program 5: 14:57:30 executing program 3: 14:57:30 executing program 0: 14:57:30 executing program 4: 14:57:30 executing program 1: 14:57:30 executing program 2: 14:57:30 executing program 0: 14:57:30 executing program 3: 14:57:30 executing program 5: 14:57:30 executing program 4: 14:57:30 executing program 1: 14:57:30 executing program 0: 14:57:30 executing program 2: 14:57:30 executing program 5: 14:57:30 executing program 3: 14:57:30 executing program 4: 14:57:30 executing program 2: 14:57:30 executing program 1: 14:57:30 executing program 0: 14:57:30 executing program 5: 14:57:30 executing program 3: 14:57:30 executing program 1: 14:57:30 executing program 4: 14:57:30 executing program 2: 14:57:30 executing program 0: 14:57:30 executing program 5: 14:57:30 executing program 3: 14:57:30 executing program 1: 14:57:30 executing program 4: 14:57:30 executing program 2: 14:57:30 executing program 0: 14:57:30 executing program 5: 14:57:30 executing program 3: 14:57:30 executing program 1: 14:57:31 executing program 4: 14:57:31 executing program 2: 14:57:31 executing program 5: 14:57:31 executing program 0: 14:57:31 executing program 3: 14:57:31 executing program 1: 14:57:31 executing program 2: 14:57:31 executing program 4: 14:57:31 executing program 3: 14:57:31 executing program 5: 14:57:31 executing program 0: 14:57:31 executing program 1: 14:57:31 executing program 2: 14:57:31 executing program 4: 14:57:31 executing program 3: 14:57:31 executing program 0: 14:57:31 executing program 1: 14:57:31 executing program 5: 14:57:31 executing program 2: 14:57:31 executing program 4: 14:57:31 executing program 3: 14:57:31 executing program 1: 14:57:31 executing program 0: 14:57:31 executing program 5: 14:57:31 executing program 2: 14:57:31 executing program 4: 14:57:31 executing program 0: 14:57:31 executing program 3: 14:57:31 executing program 1: 14:57:31 executing program 4: 14:57:31 executing program 5: 14:57:31 executing program 2: 14:57:31 executing program 0: 14:57:32 executing program 3: 14:57:32 executing program 1: 14:57:32 executing program 4: 14:57:32 executing program 0: 14:57:32 executing program 3: 14:57:32 executing program 2: 14:57:32 executing program 5: 14:57:32 executing program 1: 14:57:32 executing program 2: 14:57:32 executing program 4: 14:57:32 executing program 0: 14:57:32 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$getflags(r0, 0x2) 14:57:32 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)='_', 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 14:57:32 executing program 4: pipe(&(0x7f0000001180)={0xffffffffffffffff}) close(r0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:32 executing program 1: 14:57:32 executing program 2: 14:57:32 executing program 3: 14:57:32 executing program 0: write(0xffffffffffffffff, 0x0, 0xfffffffffffffefc) 14:57:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000180)=@in6, 0xc, 0x0}, 0x0) 14:57:32 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getuid() fchown(r1, r2, 0xffffffffffffffff) 14:57:32 executing program 2: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) 14:57:32 executing program 4: syz_emit_ethernet(0xe5, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69f0365700af1d0100000000000000000000ffffac1400bbff"], 0x0) 14:57:32 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) 14:57:32 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@in6, 0xc, 0x0, 0xefbff9a19fff510b}, 0x0) 14:57:32 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:57:32 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) 14:57:32 executing program 1: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 14:57:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000080)=@abs, 0x8, &(0x7f0000000580)=[{&(0x7f00000006c0)="573c182d926df21379b8642d701b9b9cba5ccbe31eda8e334fd9a963265be0498572a9dd53e38fa6914b56aa94da023daebd2dc6fa3833f14a736aded04895622e6fd4f21d0e7aa1bafd1c6c39095ca470946520704fc6ef2efeda131c060543eb04284088799b59d26dd0630ab38a869d416d09", 0x74}, {&(0x7f0000000100)="e74a3b39920d862c53542ef57e670824", 0x10}, {&(0x7f00000001c0)="bacd47c2ef72e33a619354aab91af16c3e0e3a7ac8af1a85d0430a8305665b4624de9f4a47826d703409579870c9dc5076e7a0c37834e7d907a9fa2ff4f4c4e31f53c16f1b0bb25612d59dc4416e8c09c8cf2e379f969d69bf0b358a6cedf3ba1cb90560fe694456b3a727f548d24a3362d6a58b565bffdb4faf355cb062fcf4aa4bd9dee79067a7740237777ea203", 0x8f}, {&(0x7f0000000280)="3753a4dddf6dfae29ee611f3f6dba8de3711b521b8b7c7da662047cee730115843fc35b3c1b0a91e8c2df243c020cbf63cb654ea8e925373049ff8ad67956c356c3bec214667bb167a664fa4fb8e3f5ff389501c82c56699000000000000", 0x5e}], 0x4}, 0x0) 14:57:32 executing program 0: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 14:57:33 executing program 1: syz_emit_ethernet(0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08"], 0x0) 14:57:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 14:57:33 executing program 2: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) 14:57:33 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14:57:33 executing program 4: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) 14:57:33 executing program 0: connect$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) 14:57:33 executing program 1: syz_emit_ethernet(0xe5, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69f0365700af1d0100000000000000000000ffffac1400bbff01"], 0x0) 14:57:33 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="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", 0x201) 14:57:33 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) 14:57:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 14:57:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8b7e59f5fa4d4aed58a38a4ca6fb17180ee3cd09ac3e1b25e1731be7a66e772600900383a1c24d77532e6c4203ace1c062a411cf897d50159f1e122a6617b57c699ee71f18c97fa845a77b9f460121a2e506065d25b3c8e5e64319ff2d22144fc1592c4826b10c47e24e28551e2d60beec73a0", 0x73}], 0x100000000000011c) 14:57:33 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 14:57:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x535be9494bb7115f) 14:57:33 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 14:57:33 executing program 2: pipe(&(0x7f0000000080)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14:57:33 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 14:57:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="22f2d4bf6c44e79e4a3bd6dc47a1eac6a06b344be304f856a64b59ec19dd42f8750f12a7f2c16d12ae8d8045d0b750620ed06696c3ee1b5c79c67614f76d373d9de86d0638467c0886f0f387d487d4b9d095dbeddcc49dced7cbb859114012171c4369cedcfd1ba83abdc1510aa949d2f913d6e5ca397728f9db02d8dfdf115ebaf1f2a7450103294057", 0x8a}, {&(0x7f0000000140)="ff7f999a2a8f966f3f6cfbfa12ab208531fd0723b5cc7f9dd0c989c0dc27", 0x1e}, {&(0x7f00000001c0)="9c706ee38ef3d8ace8b9a957464047c5186805538d4f6a8e3d77885260d46ed916e890c8ce915d5427ea525262a8be7be1bf361fcc73d041d2357084839defdc2936f928f15f775ff773ddc6786344d366fb3dfc05880c393fa4b6079d23d35c184409d21bcff6fb9f33c834a341e595731e4261462f5f8cbd372f68eaa73beb7c3b28240dbf5a3e51d86b72e4b4878be8ddd87d2ce54f11627473a75138b816704993667a60c3c38e7333648fa455251f2d5fd39e4d4ded0009b9a0139a94ad40", 0xc1}, {&(0x7f00000002c0)="dcd4699b64c3e1d9cd7b3af2c970058bd87cd0f2d50ccd2333789d954ceaa6609863b5115a21ab6e94c64daafc147daf3145b8e34b07a534479ee090026f", 0x3e}, {&(0x7f0000000300)="f2229c15156237a96b17db8f6ee2d5ee320584b1e64eca3517a6f22a2d3283d08f8199c17a49c0733c8c549dd8169842e79a6c17baa9975855315847af95c0128eb388b3109d393656282a07f239dc37155e5a6eab11043dd363", 0x5a}, {&(0x7f0000000380)="07bd82f3409e8b14294deaa3563f7318e660e87b1ce31d8460ccfe0cde77d6e21a504cdf2fda39a74d2fac230af54287079e9a850c87ad9cf136dc8c6f3e4facc22ad153e6c9e1a457cd46080a8aa1923b6825e6a5aa62d9af0a40d64540ebc098", 0x61}, {&(0x7f00000006c0)="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", 0xd9f}], 0x7}, 0x0) 14:57:33 executing program 3: r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, &(0x7f0000000140)={0x0, ""/145}, 0x99, 0x2, 0x1000) msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc3, 0x0) 14:57:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs, 0x8) 14:57:34 executing program 5: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:57:34 executing program 4: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 14:57:34 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 14:57:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/189, 0xbd}], 0x1}, 0x0) 14:57:34 executing program 5: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 14:57:34 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 14:57:34 executing program 1: connect$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 14:57:34 executing program 2: syz_emit_ethernet(0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080048"], 0x0) 14:57:34 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff}) 14:57:34 executing program 3: mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 14:57:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="697ee5b7c0354cd0aa1cea8ff32644ee817804ae05019f0a522493b4f7b6de9773117c8223646098c0d6cdbce5314ebef78c3f2ba823f462ae0da72c2122b1735ec9a679f9f13d8a89718cc276e4a233568483f5b21e3ddf4abb06c0e38f359968c44a40ab3cde5220caf63d612938f4c9a880ee787317ea80d6f6c72fa61f18edc62a778564eec37559220d819f876b3c", 0x91}], 0x1) 14:57:34 executing program 1: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa) 14:57:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='\b', 0x1}], 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1) 14:57:34 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 14:57:35 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x93309257e50e4fde, 0x0) 14:57:35 executing program 4: r0 = getgid() setregid(r0, 0xffffffffffffffff) 14:57:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="2192fc65c7e62e723843fb966d53fa2d56740b8d", 0x14}], 0x1) 14:57:35 executing program 5: syz_emit_ethernet(0xe5, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd"], 0x0) 14:57:35 executing program 2: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000100)) 14:57:35 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:35 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:57:35 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:35 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 14:57:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000180)=@in6, 0xc, 0x0}, 0x0) 14:57:35 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000002340)="9b", 0x1}], 0x1) close(r0) 14:57:35 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:57:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 14:57:35 executing program 3: 14:57:35 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000480)="a3d35368e3397856763abf3b49c10c8c0d315bbb25a7feeb850cecb183d364308862f178c0c774c5cc382a6c188ba4afa3186087501d758ecb3d2fd8dd6134a51ca9caf33460edf96c39739692546224dd2f25980221aeea203290dc0d202c148cf556269e8f1705ef2f97", 0x6b}, {&(0x7f00000000c0)="e6258b17f5b446349e54dde18096c9e5aaa95beca4cb15c5f1b2c12893cb94ebde9ba0513e7e3b3d27a2a5c7d776acc2e086", 0x32}, {&(0x7f0000000100)="99d65a7312cef8518416ae75548bbf0030a738151a000909b0e3352c94fcf454e0764b8fbe311687ce4ece3e735458c9478a0b2877932a6b70e936bc6ff3ede45e6e1c757ded1d6f3a688dbff83a59ea4e14e53160aa381bc4207ecf98cf94fc6ab55c5c52e5a65ef1c2f777a2166a4278a9bcb49220d31df59bc2fe9504be1c66f6983ad95072d7cbd10f4713cbf75381", 0x91}, {&(0x7f00000001c0)="cfc57f0339e3fb6a35ce18fc9cc0648410b8417fa0b8c023abf8dbe6430ba608f25530371f5faccfeff0fdb93fbadb9751b018e34f27fed0abf3a894ad338158dbe1de5238855238f5cf24438e8e2ff57b165ac4015a702cb2cb584f755a156ec4d29f4ae026f801952fb59687093178c90ba5d09672472b70963c653c04fe3464f8b4c9395f3e5b67bd8d2e4459f00a499c17f8eed0585c8b48c7d4baf88936470c1d4bc2dd706a0c9b7e28e20fc169c18215a84407536aadc1149da4f49642195b0559e46758aa25a000dcf14a8b7dbde4796b0cc63840ab19b548e35fd2e8af8b761b2f7f4908dd9adfa67c6a4ac3fc2903be968f8c5bf1", 0xf9}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="318793c256269473a8cc4cfc4edeee8a6c1048b69d90bb32512f7cb7e66e5c66d497da897fc607", 0x27}, {&(0x7f0000000400)="b322a69fca0fbfcd700831ed375dcc35651e4231c1c4ed8531161c524a090743de013d9b3db2b0772191178f35689b756aa0fa5061664f5d6e770da518442d652e5fd0f30bcd6bf83014760238e7eb62863a0e2442d85729de3a640b3565968904", 0xfffffffffffffe3b}, {&(0x7f0000000800)="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", 0xdc}], 0x8) 14:57:35 executing program 1: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:35 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 14:57:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0x0) 14:57:35 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 14:57:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="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", 0x170}, {0x0}, {&(0x7f0000000040)="18", 0x1}], 0x3) 14:57:35 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r0) fcntl$setstatus(r0, 0x4, 0x0) 14:57:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 14:57:36 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) 14:57:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 14:57:36 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r0) 14:57:36 executing program 1: mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:36 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 14:57:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f00000005c0)=""/162, 0xa2}, 0x0) 14:57:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=ANY=[], 0xa) 14:57:36 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)='_', 0x1) 14:57:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0xa) 14:57:36 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1dae56bff8ecf55037d6db844aefe1ff856ce00385e7e20552ea9bd0219f17a76100985910aa73860b5710889d1c9e7fd11121966ceb4e4f66f83a101350e318fdd9e3f02a0bba03abb9080d2711d067b770368244cb487dedc9d4df8fc949fa8108", 0x62) 14:57:36 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001400)=[{&(0x7f0000000080)="64e19609cedb6a21fde1b308af15c13cf65bac3d4756d98307d0621dede9336292423c542526317c6b884785aaf9682cda304e5b8e53756176975d7152aa3bdec774b1eca843d9279bb79b03f08df29f61bd9513dc20c1c88023434da665", 0x5e}, {&(0x7f0000000100)="893cdcfec8c7136eeb1eaa3590bc1b3be536d2cca15f639a27c087dc85dde430cda8b1b8e816a7169f4ca6775125dd7cbb5d55a563ed84e0b6306db8794676224ef272fba458d880140d3031475a05eac9b537ac7e454c0ea1d4727e5c33fdd0e78e83b888bebda17f614d7326700ba162eb9cbfa6540ef9814b564f7fc2c50687bff9d609892fa05594acfca1d6810e0f94a5118b909c8fabfbf2fdc25bac4e", 0xa0}, {&(0x7f00000001c0)="4e8b01e71d9b7dbbc4040ee1434de5ab12344f1152ee64e8f973c0c8b440926e63b5151f798afe469b8cb7b2f421650c7750ced6f1afe4d463e9049a25eda2e3210f86ebba07c63986cce4d001709de6bc6103e8d0de784c8ab5163eec2c49250a759f8ba0ae40b3145023619e8484e1e1d13663329e5a2d25263a3899e4f5dfc276b70759435345ae731cebcf9b6c94ce4c0c2d8c077f1ecb867952b11c1d0ab769a1179200bcabeb0c10cbbf9a01207a79cc66e9c6b86b7c9124f9e89a96924dd45da4ce203d483aafb3cbe4d14fbaf60e46e56d735a8e4f47c8e1e9270b6b7e6444c1c96881bcc2", 0xe9}, {&(0x7f0000000300)="2838ba76aa2bfb819434679a0a2965dba360c92ed74b3b70ceb73f0c635cb406481f519ceecd412a911e122e608b187399387c151d93acfcf2b02e7f6b30224b812e86306fe795e3ddadfbf112833a65c383d237bb9cf1b1592d16435c2dee8c03ec4b6e4d96f75f2d86c722ff782a49b2987a6cc2268301c984e627614bf20c9a9869917be4f9a75b02cc2e9d47b2b5a4dad8aa08124da1ec7a2304268d5b1468e83f833238d72e9f", 0xa9}, {&(0x7f00000003c0)="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", 0xfffffffffffffee8}, {&(0x7f00000013c0)="777c9917cde17db6624beb9d27c28e1ee052a2bcdb30be18672bb2d362246e4bcd96cac4165bd7f448dbfdb77998b59df6536c53dd4fa9699e7d8096ed5176", 0x3f}], 0x6, &(0x7f0000001480)=[{0x88, 0x0, 0x0, "c114a467094bd32cb5daad1ddd8a3c2b03a79f62b73b46aac33d4a8f49be33a55b41162f30fc4cd4c7408b98ff4b63a6d18a5a2530bfbacf44c9899600257e62b3901faba43723b0900320040972b65db98fbfd733cddf980d745c82a4b2f150ce37c02015830d8507ab4d27275d134c1a"}, {0x48, 0x0, 0x0, "d24a1726677866897e6a07391a86f2a47ab88e7c08a76de1b6959b74636c430cc60e3e071f318b4c4f93594e0d24341bc5a9d1"}, {0x48, 0x0, 0x0, "5ce635ad304196da58cfe007ec04c3863da75dd20da04417cbd217fc50e53edd228eca5ed0cb87b64555807f65922e842c6154239eab475a"}, {0xa0, 0x0, 0x0, "1982f4b2e3871058d58b4f48ecc055c4cec2d43b744fd95d1345d97774afc3903f99c22953d5d066054e0b6f31aced566f5244e33faeb39db64760e5c079d20fd3a1c649710cbdf2accca6573dca6a01d0089eba76e8130760ee7fe19463193cdb010f714cdf5b4cedd6f0398cfc8afaadedd777d52c3245cde9aa78bf20df5c18b6cfb9188ad1d54f64f6bc"}], 0x1b8}, 0x0) 14:57:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 14:57:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000080)='\b', 0x1}], 0x3) 14:57:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @random="4ccd35815dda", @val, {@ipv4}}, 0x0) 14:57:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 14:57:37 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) connect$inet6(r0, 0x0, 0x0) 14:57:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)="91a3f24b8d07ee22e4a7b8b4b2100005c7af0576e25f8415b7126d123a57a6a76a22509cc86ebc6c4960630ae3b85c73a38d1e7cf6ae5e305d2b4d9c92284aca", 0x40}, {&(0x7f0000000140)="3523816ae0cc425f56dc1a4ff0d08af993b768b322d42c42dca7447770ff462f6013e6e2ba93ae645a7815748ae16ce5a1303c21a2837b8b7fb330b8161898c3a03dd6a606f48617c254d92dac9e7393583f08798c752b62231c9488caaa3a6c5a3fadefa3b10d1e5672f85925acdece23ea73e3aad2ffb0787832441dc9bb6710630ca58a8ea745dc6531d69e1430616fa1332c1a5f00a1765009b9391e26494cd4754c6ddc7b3867187dc884c7d7313abda2e91b42ae0a9d6d715bd8c650639ef3d641587a6476c2b93ec06dcfe5f49f7b67591cca849967ef3e9d28ab1ee084e1c8", 0xe3}, {&(0x7f0000000240)="973eb45db007b34db7a18dad5bbaabc001963c7eb6a6b0b26f50396c9c94ad51", 0x20}, {&(0x7f0000000280)="4757555538e3b98fe10e978ebe6d32c7192e5a8ae7005433f3970d53505cf24cc4137f690f9220c19ac78397d6aafc21e845d75f59ffcc1e579771dc699f5216f7214e684929082add4c30240c08651761b5cccd7b008e3094b7a5d4d59195470f2699649d36ef0fffda0fe31e68", 0x6e}, {&(0x7f0000001540)="bdb746984b6e6e882463ba007f9f1d81052389a826b8d8ce3606d6788ebb2ab8cc66fe7ed2d30aebbdd52022b617a4c70264df59871885503691fc48c9e3d18928dc79f7670ec84674018391eb6e4faa4020c92db4b3c5e8f80423cd6e1de09b242f769f5c5c263bd332db95a3611e944e8f9fb41f89145178a6d7730ad70cc82f24662be0c274ff7f7cf02d08db8a01f484a2389cce5eb58bccf260c60a002a5f98e7f92b2e4696cf317b367722e5d819332239ed53379277adc466bd6f2ca46bbae98c602ee930", 0xc8}, {&(0x7f0000000480)="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", 0x50b}], 0x6) 14:57:37 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) 14:57:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 14:57:37 executing program 1: syz_emit_ethernet(0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 14:57:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='\b', 0x1}], 0x1) 14:57:37 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 14:57:37 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 14:57:37 executing program 0: mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) munlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 14:57:37 executing program 3: socket(0x18, 0x3, 0x6) 14:57:37 executing program 1: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 14:57:37 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) 14:57:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 14:57:37 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:57:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000080)=@abs, 0x8, 0x0}, 0x0) 14:57:37 executing program 0: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 14:57:37 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 14:57:37 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = getpid() fcntl$setown(r0, 0x6, r1) close(r0) 14:57:37 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4) 14:57:38 executing program 0: socket$unix(0x1, 0x1c622031ce9399ae, 0x0) 14:57:38 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @local, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @broadcast, "c4c13de42d92d49e5e0b0fe8a9a0b181"}}}}, 0x0) 14:57:38 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14:57:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect(r0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0xa) 14:57:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 14:57:38 executing program 5: open$dir(&(0x7f0000000140)='./file0\x00', 0x610, 0x0) 14:57:38 executing program 0: 14:57:38 executing program 1: 14:57:38 executing program 4: 14:57:38 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 14:57:38 executing program 2: mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14:57:38 executing program 1: 14:57:38 executing program 3: 14:57:38 executing program 4: 14:57:38 executing program 0: 14:57:38 executing program 2: 14:57:38 executing program 5: 14:57:39 executing program 3: 14:57:39 executing program 4: 14:57:39 executing program 1: 14:57:39 executing program 0: 14:57:39 executing program 2: 14:57:39 executing program 5: 14:57:39 executing program 3: 14:57:39 executing program 4: 14:57:39 executing program 1: 14:57:39 executing program 5: 14:57:39 executing program 2: 14:57:39 executing program 3: 14:57:39 executing program 0: 14:57:39 executing program 1: 14:57:39 executing program 4: 14:57:39 executing program 5: 14:57:39 executing program 0: 14:57:39 executing program 2: 14:57:39 executing program 3: 14:57:39 executing program 1: 14:57:39 executing program 5: 14:57:39 executing program 3: 14:57:39 executing program 4: 14:57:39 executing program 0: 14:57:39 executing program 2: 14:57:39 executing program 5: 14:57:39 executing program 4: 14:57:39 executing program 1: 14:57:39 executing program 3: 14:57:39 executing program 0: 14:57:39 executing program 4: 14:57:39 executing program 5: 14:57:39 executing program 2: 14:57:39 executing program 1: 14:57:40 executing program 3: 14:57:40 executing program 5: 14:57:40 executing program 0: 14:57:40 executing program 4: 14:57:40 executing program 2: 14:57:40 executing program 3: 14:57:40 executing program 1: 14:57:40 executing program 4: 14:57:40 executing program 5: 14:57:40 executing program 0: 14:57:40 executing program 3: 14:57:40 executing program 2: 14:57:40 executing program 1: 14:57:40 executing program 4: 14:57:40 executing program 5: 14:57:40 executing program 0: 14:57:40 executing program 3: 14:57:40 executing program 2: 14:57:40 executing program 1: 14:57:40 executing program 4: 14:57:40 executing program 3: 14:57:40 executing program 5: 14:57:40 executing program 2: 14:57:40 executing program 0: 14:57:40 executing program 1: 14:57:40 executing program 4: 14:57:40 executing program 3: 14:57:40 executing program 5: 14:57:40 executing program 0: 14:57:40 executing program 2: 14:57:40 executing program 1: 14:57:40 executing program 4: 14:57:41 executing program 5: 14:57:41 executing program 0: 14:57:41 executing program 3: 14:57:41 executing program 2: 14:57:41 executing program 1: 14:57:41 executing program 4: 14:57:41 executing program 5: 14:57:41 executing program 0: 14:57:41 executing program 3: 14:57:41 executing program 2: 14:57:41 executing program 1: 14:57:41 executing program 4: 14:57:41 executing program 3: 14:57:41 executing program 2: 14:57:41 executing program 5: 14:57:41 executing program 0: 14:57:41 executing program 1: 14:57:41 executing program 4: 14:57:41 executing program 2: 14:57:41 executing program 3: 14:57:41 executing program 5: 14:57:41 executing program 0: 14:57:41 executing program 1: 14:57:41 executing program 4: 14:57:41 executing program 3: 14:57:41 executing program 5: 14:57:41 executing program 2: 14:57:41 executing program 0: 14:57:41 executing program 1: 14:57:41 executing program 4: 14:57:41 executing program 3: 14:57:41 executing program 5: 14:57:41 executing program 2: 14:57:42 executing program 0: 14:57:42 executing program 1: 14:57:42 executing program 4: 14:57:42 executing program 5: 14:57:42 executing program 3: 14:57:42 executing program 2: 14:57:42 executing program 0: 14:57:42 executing program 1: 14:57:42 executing program 4: 14:57:42 executing program 5: 14:57:42 executing program 3: 14:57:42 executing program 2: 14:57:42 executing program 0: 14:57:42 executing program 1: 14:57:42 executing program 5: 14:57:42 executing program 4: 14:57:42 executing program 2: 14:57:42 executing program 3: 14:57:42 executing program 0: 14:57:42 executing program 1: 14:57:42 executing program 5: 14:57:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000080)=""/246, 0x2a, 0xf6, 0x1}, 0x20) 14:57:42 executing program 2: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x76) 14:57:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x433dfba5d3cf712e, @perf_bp={0x0}, 0x0, 0x0, 0xfffffeff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ec600002f00051bd25a80648c63940d0b24fc6010009940020000000200000237153e67050201802f000000d1bd", 0x33fe0}], 0x1}, 0x0) 14:57:42 executing program 3: 14:57:42 executing program 1: 14:57:42 executing program 4: 14:57:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff610001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x6, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff610001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:42 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0xfa38) 14:57:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@can, 0x80, &(0x7f00000000c0)=[{&(0x7f0000002000)="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", 0x1000}], 0x1}, 0x20008000) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x11000000}}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="e66fdb0cda49903d45feb3fb5ca6dc312d9539dbd37f1062895219d8f43c785b7cdcec414a54b65ec6be6fbe70d0a7ef7354dbfcd292e7ade946102ab6fd58c86bad6066c9bc4d571b7532f65e4f3472692bac485813c0a1078797c0847ae1d233a8607bb887de51b59d5be0b4acd2cd9a7b6d26c45388f0d0832bc5ac4d4b5f224e90c7a3d2e47d6976d9170f7effca48c63f10adbf1dfc41091751b6406d4317105537393fc66a96c908e5d3c8ac80c83c434a166e4be9b26262", 0x200007fb}, {&(0x7f0000000800)="a5d0ad5c4f5d25e5ce804ee8eff6a9d3751f7d57a8d653a20f66ffbd85ecd5c230ee1d2d4449e08ebc9b59106fbc1ba4e32fe8efb559fe1dabd8051b3e4742240027708700c2f6865f7197357b2f718f9b41b9bc0578a86e78c440e84130828643ad7a782910cee5d19a6e9850e309db6ca7d90abec63f82de2722b9e234040c111454a723d44751122b6af34887150c5dfa35f783127a8ca4dcac8c8338bdd27ad748e7f471c094f4f4cba0cce1ccaed72ca441519d9677a7bd4dd86a514ae6", 0xc0}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f00000008c0)="f1b9348f405606cffc6d8aeb4ac55b507d3373554404e4cfbb061dabebcbd637807d5f982357a1f24bbbc50cd64cb0dd146f3c558c1a906b0d90aa39cae4fdeddb09cdc632fd3a701ce90f93488cbe1bc0394fc7ed4a1f331ecef4ca98850487b2eecf226ca7ec3171981382aa8ab1c8cf4c48846daf2bbb291f11ef68ae505ffb99ed80acbb61cd89b5ea16da75f26d59b00344a35faef92e1524aa2724c1b763645ff5f88d505a6cece68d36346fc260eb524c431c0155d38f5bea7f66595c", 0xc0}, {&(0x7f0000000980)="a890e850f03711b4a130fd2b2cb54c29da5874dbf332f09da8bab18afdcceeffddcf365f95b1f28e53f1642747bbe954f6f4a3b228ed8c1269cbf8c18d977039b9c84e5c30567e2e4d31d10eb4d7f30f1074104fb70a2c", 0x57}, {&(0x7f0000000a00)="15c752f4f64c6d4630a0e658e628cf8ba33be5e43fb67e93203ab48e84a5a3e435e467e16f216b62c0271b6ab86b8890adba51a81bf3adb5a496eeddb3919a55cb89dd22429d178b15e4c0f53499b932f0d99daf96fd06e99731a8", 0x5b}], 0x6, &(0x7f0000000b00)=[{0x18, 0x0, 0x0, "3bb255e8a340"}, {0xf8, 0x0, 0x0, "e6d50ab79937ebe0f7a317571ae931d7b829a2f7a39b1ecc757c41a86c0a14b7b6a6bfd0d874c200086ee24dbae97a65c978af9bb14d32f8081f18814f64221d9022f55f8f3a87854056e323680d15400b8c86d14b9304ff44a4f2918e67a9b22b019a3b79f2db01ba7e6ea2a607432b7b0876a225c23590547032f68e6fcb97446e5a630628229650543f542a5c961e5b4d01d359dfd7b7648070ac2370337169fa3f343430d75457091516bff92e9fe5cb7619dad6e89437e60823cfbe5763fc4964f8e18d836dab0bdcaa3304bb74925b689edc60b11b07109597e21b70e4a0c513e0848508"}, {0x90, 0x0, 0x0, "64d3f00f48497cfc84121530fbce9714cb5d8eb2873d6faa555ca8a1ca687003cfe49e0025f507a131f3de44640864f5861e6d8f289fa57f644b641514f746294eba417b62258acf55b666ba6914358fe8899e03609d91f4a20d982d0bc6efa6460c0b39052cf4def05928c6c7bb0e6e1cb030f96f54bb62a804e78a"}, {0x78, 0x0, 0x0, "a6d1bae6c20998ff0a6461218c1b920fbac8da8777c0bbce5522fc9303544f4c9d7e1aad9e388a504beaaa8e0a69d58353804d7b5acfc9235b88922699581e0f405d0c0a62ac568d71dde0e5d297762ca71fc2ec1d1a87b97a77b129b39b38459f1b"}], 0x218}, 0x1) 14:57:43 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x4c00}]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) 14:57:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x40) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 14:57:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800), 0x8) 14:57:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000200)=""/154, 0x26, 0x9a, 0x1}, 0x20) 14:57:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x78) 14:57:43 executing program 5: socketpair(0xa, 0x6, 0x0, &(0x7f0000001580)) 14:57:43 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10234b6fb14bcced00718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b5f9fd30dd0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 14:57:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x2, 0x3, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) 14:57:43 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 14:57:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff611001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 14:57:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:57:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x81, 0x0, 0x800004, 0x0, 0xfffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0xff, 0x40, 0xc1, 0x81, 0x0, 0x7, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x18004, 0x80000001, 0x100, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x401c5820, 0x7ffcc25bb003) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xbab4) r3 = gettid() r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r4, 0x0, 0x10, 0x0}, 0x30) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1ef, 0x0, 0x6}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r3, 0x40000000000e, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') 14:57:43 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)=""/73, 0x49}], 0x1}, 0x0) 14:57:43 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 14:57:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 14:57:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x3, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x5a, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 14:57:43 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000052c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001a80)={&(0x7f00000016c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) 14:57:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000200)=""/246, 0x36, 0xf6, 0x1}, 0x20) 14:57:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0}, 0x10) 14:57:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) 14:57:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x1, 0x2, 0xa63, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 14:57:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x8002, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x0, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x20000000002, 0x73) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 14:57:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x5, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 14:57:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff61100a000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000002be80)={0x1, 0x1, &(0x7f0000000100)=@raw=[@generic], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff6e, &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffff8d}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8000000026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg(0xffffffffffffffff, 0x0, 0x0) 14:57:44 executing program 0: socketpair(0x23, 0x5, 0x0, &(0x7f0000001580)) 14:57:44 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f080351fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a390101050a8da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 14:57:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="2b5d347383b731f711b5aca259cd3253a409d420d42e235efe12cb3c60876850704d84dc258a77a7119b5bec039221d22ac75d3d91b398b42837233feb0e1800358be48646eb3b6bd47c207883e7a697efeca0f5a07fe87361fb87bd16f6b67cace6a5eab06edd3ef9b1860f619fbda83cfc0f31ea94884de30d138fa5cc9d8920819f723e77a36a495c2ed60a6aacb617427370b9f18aeecef3a64741f33c99a3bb221d7b8ebd9e00032d6296129ed8f154a75d0c0f6b4fb2386b63352a60a9e3059bafcbca", 0xc6}], 0x2, &(0x7f00000016c0)=[{0x38, 0x10d, 0x3, "838ec8f20b43bbe4fb2c9753b66029b160bbaf8a1bb51cffd8abd7dfa75d682e3732837660adb193"}, {0x100, 0x118, 0xfa, "e0dbfcf31210c3cc66af44b93885568fb3da4f0276dde4f775b622ff4ca85e39c72d55c272086a51f73c8a7f3419de6fa862c21d1d03f40674e3bab9fc8a42d46d14e078988bffca1906d061f7790edd4360076239693419a0171f6afa1c6945af462d70b5b54d2f0b8dd9e82edc8eadd1b7d72809899c20b8a55686d697c3772ea9679586f851877c23294a55d59526fa49aae3ed1fe71d446392925549d781c40e1875de1e17e47f8c34d2dae47c0d63656cf64f71706c4d99b11aa007c8d546ff54e09e69d315ff9b1c1ea7043665cef22ea431ce5d77d466aef77f14716875684f068bec6b5598ff26d9251d1142"}, {0x50, 0x84, 0x1, "049db8c660709f40990f9340278ef047b8786929086c4bed9ddefa0e37f6ab88c3c7df3f1ec65a90341b548b8c1bf92ebb7a7d56c1f8eefad20aec67607733"}], 0x188}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x10e, 0x9, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@ipx={0x4, 0x6, 0x200, "080000000100", 0x11}, 0x80, &(0x7f00000002c0)}, 0x4008142) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000, 0x1ff}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x5, 0x70, 0xf9, 0xb, 0xff, 0x5, 0x0, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x206, 0xc, 0x10000008, 0x5}) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x1, 0xff, 0x8, 0x3, 0x0, 0x3, 0x608, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x8020, 0x401, 0x0, 0x9, 0x7073, 0xffff, 0xfff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x121, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a0605845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) 14:57:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}]}}, &(0x7f0000000200)=""/246, 0x2e, 0xf6, 0x1}, 0x20) 14:57:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="2b5d347383b731f711b5aca259cd3253a409d420d42e235efe12cb3c60876850704d84dc258a77a7119b5bec039221d22ac75d3d91b398b42837233feb0e1800358be48646eb3b6bd47c207883e7a697efeca0f5a07fe87361fb87bd16f6b67cace6a5eab06edd3ef9b1860f619fbda83cfc0f31ea94884de30d138fa5cc9d8920819f723e77a36a495c2ed60a6aacb617427370b9f18aeecef3a64741f33c99a3bb221d7b8ebd9e00032d6296129ed8f154a75d0c0f6b4fb2386b63352a60a9e3059bafcbca", 0xc6}], 0x2, &(0x7f00000016c0)=[{0x38, 0x10d, 0x3, "838ec8f20b43bbe4fb2c9753b66029b160bbaf8a1bb51cffd8abd7dfa75d682e3732837660adb193"}, {0x100, 0x118, 0xfa, "e0dbfcf31210c3cc66af44b93885568fb3da4f0276dde4f775b622ff4ca85e39c72d55c272086a51f73c8a7f3419de6fa862c21d1d03f40674e3bab9fc8a42d46d14e078988bffca1906d061f7790edd4360076239693419a0171f6afa1c6945af462d70b5b54d2f0b8dd9e82edc8eadd1b7d72809899c20b8a55686d697c3772ea9679586f851877c23294a55d59526fa49aae3ed1fe71d446392925549d781c40e1875de1e17e47f8c34d2dae47c0d63656cf64f71706c4d99b11aa007c8d546ff54e09e69d315ff9b1c1ea7043665cef22ea431ce5d77d466aef77f14716875684f068bec6b5598ff26d9251d1142"}, {0x50, 0x84, 0x1, "049db8c660709f40990f9340278ef047b8786929086c4bed9ddefa0e37f6ab88c3c7df3f1ec65a90341b548b8c1bf92ebb7a7d56c1f8eefad20aec67607733"}], 0x188}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x10e, 0x9, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@ipx={0x4, 0x6, 0x200, "080000000100", 0x11}, 0x80, &(0x7f00000002c0)}, 0x4008142) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000, 0x1ff}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x5, 0x70, 0xf9, 0xb, 0xff, 0x5, 0x0, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x206, 0xc, 0x10000008, 0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x121, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400e702cc13095f9f95274b0a0605845865400440010000000000007fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b", 0x48}], 0x1}, 0x0) 14:57:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x70], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff611001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xf4240, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x0, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000004"], 0x20}, 0x0) 14:57:45 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000001580)) 14:57:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001a80)={&(0x7f00000016c0), 0x10, 0x0}, 0x0) 14:57:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x7, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000200)=""/154, 0x32, 0x9a, 0x1}, 0x20) 14:57:45 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/202, 0xca}, 0x162) 14:57:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x1, 0x2, 0xa63}, 0x40) 14:57:45 executing program 2: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d40)="cce6467c56e4166b5a5fef6a80a3a478f4a05b1af5a13920058e64fe5efff460a3c2b9fe04a76909", 0x28}], 0x1}, 0x0) 14:57:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a00000000000000020000050104000000000000030000000000000005"], &(0x7f0000000140)=""/137, 0x86, 0x89, 0x1}, 0x20) 14:57:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xe101, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x2, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x2, &(0x7f0000000440)=@raw=[@initr0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 14:57:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ec600002f00051bd25a80648c63940d0b24fc6010009940020000000200000237153e67050201802f000000d1bd", 0x33fe0}], 0x1}, 0x0) 14:57:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x6, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="39000000140081f4b5e6a9000500018311001f9f660fcf065b05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x10\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='wlan1\x00 \x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6*\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\x03\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x1f0}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:57:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x19, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/246, 0x2e, 0xf6, 0x1}, 0x20) 14:57:45 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) close(r0) 14:57:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000004000000000000000000e1ffff610001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x401c5820, 0x7ffcc25bb003) 14:57:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x61}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x3, 0xa}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {}]}]}}, &(0x7f0000000200)=""/246, 0x36, 0xf6, 0x1}, 0x20) 14:57:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0x40) 14:57:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 287.819285][T13986] device wlan1 entered promiscuous mode [ 288.070651][T13993] device wlan1 left promiscuous mode [ 288.203379][T13996] device wlan1 entered promiscuous mode 14:57:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) 14:57:47 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 14:57:47 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='.\x00'}, 0x10) 14:57:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x4}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) 14:57:47 executing program 0: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:57:47 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x10, &(0x7f00000004c0)={&(0x7f00000003c0)=""/225, 0xe1}}, 0x10) 14:57:47 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 14:57:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff610001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 3: socketpair(0x23, 0x2, 0x0, &(0x7f0000001580)) 14:57:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xe101, &(0x7f0000000000)=@raw=[@initr0, @ldst, @exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 288.566081][T14042] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:57:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff611001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 288.609355][T14042] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:57:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x3, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x5}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 14:57:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x2, 0x2, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 288.712901][T14036] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 288.750271][T14047] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:57:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000000200)=""/246, 0x2e, 0xf6, 0x1}, 0x20) [ 288.779508][T14042] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 288.801920][T14042] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:57:47 executing program 0: socketpair(0x10, 0x2, 0x1, &(0x7f0000000000)) 14:57:47 executing program 2: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000024c0)="2e00000021008102e00f80ecdb4cb902020000fffd000000810040fb12000f00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 14:57:47 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, 0x10, 0x0}, 0x0) 14:57:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x7a}]}}, &(0x7f0000000200)=""/246, 0x26, 0xf6, 0x1}, 0x20) 14:57:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0, @ldst={0x4, 0x0, 0x3}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 288.992076][T14064] netlink: 'syz-executor.2': attribute type 15 has an invalid length. 14:57:47 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000b7c0)={&(0x7f000000b640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f000000b700)=""/178, 0x26, 0xb2, 0x1}, 0x20) 14:57:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x12, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 4: socketpair(0x25, 0x1, 0x0, &(0x7f0000001580)) 14:57:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x61, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=""/179, 0x0, 0xb3}, 0x20) 14:57:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000013380)) 14:57:48 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f000000c680)={0x0, 0x0, 0x0, 0x0, &(0x7f000000c500)=ANY=[], 0x150}, 0x4044010) 14:57:48 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000008000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 14:57:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 14:57:48 executing program 3: socketpair(0xf, 0x3, 0x0, &(0x7f0000000700)) 14:57:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000e1ffff611001040000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000340)=""/228, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x5, 0x7a}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/183, 0x2d, 0xb7, 0x1}, 0x20) 14:57:48 executing program 1: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)) 14:57:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}]}}, &(0x7f00000002c0)=""/183, 0x32, 0xb7, 0x1}, 0x20) 14:57:48 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 14:57:48 executing program 5: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000380)) 14:57:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f000000c4c0)={0x0, 0x0, 0x0}, 0x0) 14:57:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000680)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 14:57:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/238, 0x2c, 0xee, 0x1}, 0x20) 14:57:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "65d0"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b165"}]}}, &(0x7f00000003c0)=""/225, 0x36, 0xe1, 0x1}, 0x20) 14:57:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:57:48 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xbd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) 14:57:48 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x7}, 0x10) 14:57:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) 14:57:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000082c0)={0xa, 0x40, 0x4, 0x8001}, 0x40) 14:57:48 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f000000c4c0)={0x0, 0x0, &(0x7f000000c380)=[{&(0x7f000000c280)=""/204, 0xcc}], 0x1}, 0x0) 14:57:48 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000280)) 14:57:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000002c0)=""/183, 0x2c, 0xb7, 0x1}, 0x20) 14:57:48 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 14:57:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x0, 0x3}]}}, &(0x7f00000002c0)=""/183, 0x26, 0xb7, 0x1}, 0x20) 14:57:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000080000000800000000500000004000000056c000f"], &(0x7f00000002c0)=""/189, 0x9d, 0xbd, 0x1}, 0x20) 14:57:48 executing program 4: socketpair(0xa, 0x0, 0x2000000, &(0x7f0000000000)) 14:57:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x6c00, 0x0, 0x6}]}}, &(0x7f00000002c0)=""/183, 0x26, 0xb7, 0x1}, 0x20) 14:57:49 executing program 5: socketpair(0x3, 0x0, 0x5c000000, &(0x7f0000000380)) 14:57:49 executing program 2: socketpair(0x25, 0x5, 0x2f3018e, &(0x7f0000000000)) 14:57:49 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:57:49 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x17}, 0x10) 14:57:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000c640)={&(0x7f000000b500)=ANY=[@ANYBLOB="9feb01001800000000000000000100000001000007000000030000000000000e"], &(0x7f000000b640)=""/4096, 0x11f, 0x1000, 0x1}, 0x20) 14:57:49 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, &(0x7f0000000bc0)=ANY=[], 0x300}, 0x0) 14:57:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)=@isdn, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x103, 0x9}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="11840209903c08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c321240c1b1b54babad07a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6318bec9ef28b9171b0492bddb09009a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b01803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f801847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554acf62aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c25617568b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191c9ecfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a994e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c", 0x5}, {&(0x7f0000000840)="e6", 0xc9ed}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 14:57:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 14:57:49 executing program 5: sendmsg$sock(0xffffffffffffffff, 0x0, 0x97aa8b1afd720154) 14:57:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 14:57:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000700aaaaaaaaaabbaaaaaaaaaa44aaaaaaaaaaaaaaaaaaaaaabbaaaaaaaaaaaaaabb1ac97f1b00c405bc49cfbcd646fa41a54564a498973c705d6aa4e0d188dfb692e6267eca22a9614a92c7ba6d37ee188985f5317142e3f8d0d97deb254c17496dc5d01fc8f03cc708869d8a5c8df398dbb25e82867c669c4ffb2649455b6938ecb75be27aef5ce15513708fd75bd2a45f501be1404433f301f37679b45c5c38bff71b06ff109244e255ebeb08e12201ea0da9c003d927ac2f38347429d3a0da08de8edd9c7de3ce589ba4615c0a502dcc2354bcf0b645eec10579"]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) 14:57:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/238, 0x2c, 0xee, 0xfffffffd}, 0x20) 14:57:49 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) 14:57:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 14:57:49 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0xed}]}}, &(0x7f0000000100)=""/238, 0x2a, 0xee, 0x1}, 0x20) 14:57:49 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x394642, 0x0) 14:57:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'K'}]}}, &(0x7f0000000680)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 14:57:50 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x20002, 0x0) 14:57:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000082c0)={0x5, 0x40, 0x4, 0x8001}, 0x40) 14:57:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000050000000400000005000003"], &(0x7f00000002c0)=""/189, 0x9d, 0xbd, 0x1}, 0x20) 14:57:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x4, 0x8, 0xfff, 0x0, 0x1}, 0x40) 14:57:50 executing program 5: socketpair(0x1d, 0x0, 0x7, &(0x7f0000000380)) 14:57:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0xc, 0x0, 0x0, 0xf, 0x2, [], "65d0"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b165"}]}}, &(0x7f00000003c0)=""/225, 0x36, 0xe1, 0x1}, 0x20) 14:57:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 14:57:50 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000800000008000000005000000040000000500000e"], &(0x7f00000002c0)=""/189, 0x9d, 0xbd, 0x1}, 0x20) 14:57:50 executing program 1: socketpair(0x2, 0x3, 0x8, &(0x7f0000000380)) 14:57:50 executing program 2: 14:57:50 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x28}, 0xc) 14:57:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000100)=""/238, 0x2a, 0xee, 0x1}, 0x20) 14:57:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0x1, &(0x7f0000000500)=@raw=[@generic], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x2, [{}], "65d0"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b165"}]}}, &(0x7f00000003c0)=""/225, 0x42, 0xe1, 0x1}, 0x20) 14:57:50 executing program 2: socketpair(0x28, 0x0, 0x7fff, &(0x7f0000000080)) 14:57:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7}], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:57:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/183, 0x2c, 0xb7, 0x1}, 0x20) 14:57:50 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200001f4) 14:57:50 executing program 5: unlink(&(0x7f0000000040)='\x00') 14:57:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6}]}}, &(0x7f00000002c0)=""/183, 0x26, 0xb7, 0x1}, 0x20) 14:57:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:57:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000082c0)={0xd, 0x0, 0x4, 0x0, 0x4}, 0x40) 14:57:51 executing program 3: socketpair(0x2, 0x0, 0x6201, &(0x7f0000000380)) 14:57:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000082c0)={0xd, 0x40, 0x4, 0x8001}, 0x40) 14:57:51 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 14:57:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x4, 0x0, 0xfff, 0x0, 0x1}, 0x40) 14:57:51 executing program 3: socket$inet6(0x18, 0x3, 0x0) 14:57:51 executing program 2: fcntl$lock(0xffffffffffffffff, 0x9, 0x0) 14:57:51 executing program 4: symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') 14:57:51 executing program 0: pipe2(0x0, 0x0) pipe2(&(0x7f0000000340), 0x0) 14:57:51 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000380)) socketpair(0x2, 0x2, 0x101, &(0x7f0000000040)) 14:57:51 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0) 14:57:51 executing program 2: symlink(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') chdir(&(0x7f0000001440)='./file0\x00') 14:57:51 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 14:57:51 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 14:57:51 executing program 0: mkdir(&(0x7f0000002400)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480), 0x0) 14:57:51 executing program 1: socket$inet(0x2, 0x0, 0x1) 14:57:51 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') 14:57:51 executing program 2: socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 14:57:51 executing program 0: semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, 0x0) 14:57:51 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x0) 14:57:51 executing program 5: pipe2(0x0, 0x0) socket(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 14:57:51 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000002740)) 14:57:52 executing program 2: pipe2(0x0, 0x0) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') 14:57:52 executing program 1: 14:57:52 executing program 0: 14:57:52 executing program 5: setsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x11, 0x0, 0x0) 14:57:52 executing program 4: pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000340), 0x0) 14:57:52 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) acct(0x0) 14:57:52 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:57:52 executing program 0: 14:57:52 executing program 2: 14:57:52 executing program 5: 14:57:52 executing program 3: 14:57:52 executing program 4: 14:57:52 executing program 1: 14:57:52 executing program 2: 14:57:52 executing program 5: 14:57:52 executing program 3: 14:57:52 executing program 0: 14:57:52 executing program 1: 14:57:52 executing program 4: 14:57:52 executing program 5: 14:57:52 executing program 2: 14:57:52 executing program 3: 14:57:52 executing program 0: 14:57:52 executing program 1: 14:57:52 executing program 4: 14:57:52 executing program 2: 14:57:52 executing program 5: 14:57:52 executing program 0: 14:57:52 executing program 3: 14:57:52 executing program 1: 14:57:52 executing program 4: 14:57:52 executing program 2: 14:57:52 executing program 5: 14:57:52 executing program 0: 14:57:52 executing program 3: 14:57:53 executing program 1: 14:57:53 executing program 2: 14:57:53 executing program 4: 14:57:53 executing program 5: 14:57:53 executing program 0: 14:57:53 executing program 3: 14:57:53 executing program 1: 14:57:53 executing program 3: 14:57:53 executing program 5: 14:57:53 executing program 0: 14:57:53 executing program 4: 14:57:53 executing program 2: 14:57:53 executing program 1: 14:57:53 executing program 4: 14:57:53 executing program 3: 14:57:53 executing program 0: 14:57:53 executing program 5: 14:57:53 executing program 4: 14:57:53 executing program 2: 14:57:53 executing program 1: 14:57:53 executing program 0: 14:57:53 executing program 3: 14:57:53 executing program 4: 14:57:53 executing program 5: 14:57:53 executing program 2: 14:57:53 executing program 1: 14:57:54 executing program 0: 14:57:54 executing program 3: 14:57:54 executing program 5: 14:57:54 executing program 4: 14:57:54 executing program 1: 14:57:54 executing program 2: 14:57:54 executing program 0: 14:57:54 executing program 3: 14:57:54 executing program 5: 14:57:54 executing program 2: 14:57:54 executing program 4: 14:57:54 executing program 1: 14:57:54 executing program 0: 14:57:54 executing program 3: 14:57:54 executing program 5: 14:57:54 executing program 4: 14:57:54 executing program 1: 14:57:54 executing program 2: 14:57:54 executing program 3: 14:57:54 executing program 0: 14:57:54 executing program 2: 14:57:54 executing program 4: 14:57:54 executing program 5: 14:57:54 executing program 1: 14:57:54 executing program 3: 14:57:54 executing program 2: 14:57:54 executing program 5: 14:57:54 executing program 0: 14:57:54 executing program 1: 14:57:54 executing program 4: 14:57:54 executing program 3: 14:57:54 executing program 5: 14:57:54 executing program 0: 14:57:55 executing program 2: 14:57:55 executing program 1: 14:57:55 executing program 4: 14:57:55 executing program 2: 14:57:55 executing program 5: 14:57:55 executing program 3: 14:57:55 executing program 0: 14:57:55 executing program 1: 14:57:55 executing program 4: 14:57:55 executing program 5: 14:57:55 executing program 2: 14:57:55 executing program 0: 14:57:55 executing program 3: 14:57:55 executing program 4: 14:57:55 executing program 5: 14:57:55 executing program 1: 14:57:55 executing program 2: 14:57:55 executing program 0: 14:57:55 executing program 5: 14:57:55 executing program 4: 14:57:55 executing program 3: 14:57:55 executing program 0: 14:57:55 executing program 1: 14:57:55 executing program 2: 14:57:55 executing program 5: 14:57:55 executing program 3: 14:57:55 executing program 4: 14:57:55 executing program 0: 14:57:55 executing program 1: 14:57:55 executing program 3: 14:57:55 executing program 2: 14:57:55 executing program 4: 14:57:55 executing program 5: 14:57:56 executing program 0: 14:57:56 executing program 1: 14:57:56 executing program 3: 14:57:56 executing program 4: 14:57:56 executing program 2: 14:57:56 executing program 5: 14:57:56 executing program 0: 14:57:56 executing program 1: 14:57:56 executing program 3: 14:57:56 executing program 4: 14:57:56 executing program 2: 14:57:56 executing program 5: 14:57:56 executing program 1: 14:57:56 executing program 0: 14:57:56 executing program 3: 14:57:56 executing program 4: 14:57:56 executing program 2: 14:57:56 executing program 5: 14:57:56 executing program 1: 14:57:56 executing program 4: 14:57:56 executing program 3: 14:57:56 executing program 0: 14:57:56 executing program 2: 14:57:56 executing program 5: 14:57:56 executing program 4: 14:57:56 executing program 1: 14:57:56 executing program 3: 14:57:56 executing program 2: 14:57:56 executing program 0: 14:57:56 executing program 5: 14:57:56 executing program 4: 14:57:56 executing program 1: 14:57:57 executing program 3: 14:57:57 executing program 5: 14:57:57 executing program 4: 14:57:57 executing program 2: 14:57:57 executing program 0: 14:57:57 executing program 3: 14:57:57 executing program 4: 14:57:57 executing program 1: 14:57:57 executing program 5: 14:57:57 executing program 2: 14:57:57 executing program 0: 14:57:57 executing program 3: 14:57:57 executing program 4: 14:57:57 executing program 1: 14:57:57 executing program 2: 14:57:57 executing program 5: 14:57:57 executing program 0: 14:57:57 executing program 4: 14:57:57 executing program 1: 14:57:57 executing program 3: 14:57:57 executing program 5: 14:57:57 executing program 2: 14:57:57 executing program 0: 14:57:57 executing program 4: 14:57:57 executing program 1: 14:57:57 executing program 5: 14:57:57 executing program 3: 14:57:57 executing program 2: 14:57:57 executing program 0: 14:57:57 executing program 4: 14:57:57 executing program 3: 14:57:57 executing program 1: 14:57:57 executing program 2: 14:57:58 executing program 5: 14:57:58 executing program 3: 14:57:58 executing program 4: 14:57:58 executing program 0: 14:57:58 executing program 2: 14:57:58 executing program 1: 14:57:58 executing program 3: 14:57:58 executing program 5: 14:57:58 executing program 4: 14:57:58 executing program 0: 14:57:58 executing program 2: 14:57:58 executing program 1: 14:57:58 executing program 5: 14:57:58 executing program 3: 14:57:58 executing program 4: 14:57:58 executing program 0: 14:57:58 executing program 1: 14:57:58 executing program 2: 14:57:58 executing program 3: 14:57:58 executing program 5: 14:57:58 executing program 4: 14:57:58 executing program 0: 14:57:58 executing program 1: 14:57:58 executing program 2: 14:57:58 executing program 3: 14:57:58 executing program 5: 14:57:58 executing program 0: 14:57:58 executing program 4: 14:57:58 executing program 3: 14:57:58 executing program 2: 14:57:58 executing program 1: 14:57:58 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x35, 0x8, 0x40, 0xbb4, 0xa1f, 0x3670, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc6, 0xe4, 0xac, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) 14:57:58 executing program 0: syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x7, 0x183000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 14:57:59 executing program 4: rename(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe) 14:57:59 executing program 3: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 14:57:59 executing program 2: lstat(0x0, 0x0) 14:57:59 executing program 1: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:57:59 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) 14:57:59 executing program 2: read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/201, 0xc9) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x14, 0x1f, &(0x7f0000000100)="f844c51713875686e0fd52339d07224080864354972f7f705b89c5839fb6be"}) syz_usb_connect(0x5, 0x238, &(0x7f0000000180)={{0x12, 0x1, 0x1, 0xa8, 0x4c, 0xcc, 0x8, 0x846, 0x9019, 0xbe4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x226, 0x2, 0x5, 0x7f, 0x0, 0x80, [{{0x9, 0x4, 0x61, 0x3, 0x1, 0x6f, 0x31, 0x2c, 0x4, [@generic={0x10, 0x11, "193f60e9a8ef65637502249c8408"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x3, 0xfa}}]}}, {{0x9, 0x4, 0x4e, 0x6, 0x8, 0xd5, 0x51, 0x4, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x1f}}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0x45, 0xcc, [@generic={0x1f, 0xf, "406c01e3ae3c6a5a5d057e9c1684f3769beb980dbc36acdfae27bfe763"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x40, 0x81, 0x1}}, {{0x9, 0x5, 0x5, 0x5, 0x10, 0x7f, 0x9, 0x80}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7fff}, @generic={0x5a, 0x23, "9fbc7e2cff5a7b4900a96512eea6f1db5ff93fd7e4af98d4ad656d1981b42abb513a97d67a1bf13da82009508e2c5083c23c2e05948c74e8d70b45d939d0a5a2e67b329cee66cb491c20c4491ce4744f5d364ac4c40d19e1"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x6, 0x6, 0x8, [@generic={0x61, 0x31, "57cb766ca623ca83052156cb9c7b498e4f3c1bdb2e792876974f6d30b5ad10ed61889d8c9730c33fce8b4370f299409fe0b8e44b6579ea1d909d84c90500537d3a5391f13f905715df98d8a9fb8f974ecf5930b3b34b5ac22ef05a85907b23"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x1f, 0x3f, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5a, 0x5}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xd1, 0x9, 0x4, [@generic={0xa9, 0x11, "9849453c052f7d63fc99fda56c582f92715c513d04484133f4dc05d67bc1adbdb64a1488a81ea8112de70e970d5283a10fd2bcf27530ae6bd31550f6a779f1879a3b09aeb11ec2c0f2f72d3e166462214348f4a65f43e7dd675eab3f4f7264f175713041b23a80db4cf7451e7dcf683edc14d6b59e59bb76e5ae7b3d21b7c693e7fcec2825aca93f4b79882cce25b925ab2f0a55ed38be16fb1c1237e136b8fded659579d3f374"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x3f, 0x3f, 0x3}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x3, 0x40, 0x5, 0x10}, 0x3c, &(0x7f0000000400)={0x5, 0xf, 0x3c, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3d, 0x2, 0xee97}, @generic={0x29, 0x10, 0x4, "6ed0559115e9f7da07a24273f0fc76d7790884ac5f233a9a4fd50717e89c7fd424d20eeaf709"}]}, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_connect$uac1(0x1, 0xde, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x8, 0x80, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x20}, [@mixer_unit={0x7, 0x24, 0x4, 0x6, 0x20, "46b4"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x4, "aa54334d22"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x1f, "db7e5a"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0x9, 0x7, 0x2, 0x6, 0x7], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x2f9, 0x2, 0x4, 0x7}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0xd, 0x9, 0x7, 0x4, 0x5, 0x6], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x400, 0x7ff, 0x81, "72a05d0a"}, @as_header={0x7, 0x24, 0x1, 0xe9, 0x2, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x0, "b2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0x3f, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xc2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x1, 0x1a, {0x7, 0x25, 0x1, 0x3, 0x0, 0x101}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xa9, 0x4, 0x8, 0x10, 0x8}, 0xe2, &(0x7f0000000600)={0x5, 0xf, 0xe2, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "ae8ca897faf138602c11af1002886c19"}, @generic={0xc9, 0x10, 0x2, "9ece7c3f2d0b354c47f95c10c5bd22deda9e4edb2e5aa44594a8cfd6f71be63325c0f6c3b17d696b6cde4ad8338b8854f36d7f865fe71f37e2dc2111eca8e2b7ccf22113f2cf542310ce91a5ce518aadbfa4dcee99c50658d78f093d4078dca46552b1cebb4a33aaa01072803d39fa82334aedaabb722fbbb582f64c542680b93f7727a31bc329e1eae1d411326e7995569074452eee3ebe1678793d839b752c28f1a9e23ec81cb03279017e757607f7fc10698911e157ba3441621a7c6098f62ba59542c1e5"}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x280a}}, {0xad, &(0x7f0000000780)=@string={0xad, 0x3, "5ca2754e730a4d88f76008286a59e18f44ff79405732836d167480272f621c06136cd2a7d8f07ff3207698efe3fe852396f282f43c18faf404536004ca027c563bac15d6ca6cdcdfdf15cafdb77f0a80b01fd479b1aa6efc5a5d3d5ae75672e32f08d18b948618af1aa753dc3e08a70f0e391c1299217324d732db90dede362533ae5cb3cb9c825acf89f8e510fe3239ab157bec1eb03598102e5632f5c2ffb7f557d52db300177f0adfa2"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x445}}, {0xc5, &(0x7f0000000880)=@string={0xc5, 0x3, "93509fb81920f126ea5cf4bb8b548df53514b420d58e2bf1f6ed7ebd8e7163ecb5285869a2e4fef5e0fbd8dc4599fab73e2d94a60dbf54e30925c76da0a5746dcf7e5168c4c847e182eda77eb864d6bfd11bd6801759b2d6c0c71cb0c8a6c391b44de8b515f77d5644b03c8f26cd80f56c75e8345f78014fc1f19b4527060cae5fe0a2545cffa991142431d937943f136b1278f4b49a1a66d28d8111ed9e4a9f4fc7432c1d66ddc0310850e1e322f8dc620e7fc48077848ff02070d89fcc7ccde744c1"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x6b, &(0x7f0000000a00)=@string={0x6b, 0x3, "72089b132b7d1e90be2271ee7a5df81d652640b544c6e27beb720705e45a5806f107b05f2d6b953f3009b83c550bec8a66011aa8b846ec8701e13e8c165f42c0cb0bf04549fa2b86605aa517a2f4b9900f6e543249cd7c87facee93f901a7b0a385d2f319f800b4b5d"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x816}}]}) 14:57:59 executing program 3: read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/201, 0xc9) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x14, 0x1f, &(0x7f0000000100)="f844c51713875686e0fd52339d07224080864354972f7f705b89c5839fb6be"}) syz_usb_connect(0x5, 0x238, &(0x7f0000000180)={{0x12, 0x1, 0x1, 0xa8, 0x4c, 0xcc, 0x8, 0x846, 0x9019, 0xbe4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x226, 0x2, 0x5, 0x7f, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x3, 0x1, 0x6f, 0x31, 0x2c, 0x4, [@generic={0x10, 0x11, "193f60e9a8ef65637502249c8408"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x3, 0xfa}}]}}, {{0x9, 0x4, 0x4e, 0x0, 0x8, 0xd5, 0x51, 0x4, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x1f}}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x9, 0x45, 0xcc, [@generic={0x1f, 0xf, "406c01e3ae3c6a5a5d057e9c1684f3769beb980dbc36acdfae27bfe763"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x40, 0x81, 0x1}}, {{0x9, 0x5, 0x5, 0x5, 0x10, 0x7f, 0x9, 0x80}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7fff}, @generic={0x5a, 0x23, "9fbc7e2cff5a7b4900a96512eea6f1db5ff93fd7e4af98d4ad656d1981b42abb513a97d67a1bf13da82009508e2c5083c23c2e05948c74e8d70b45d939d0a5a2e67b329cee66cb491c20c4491ce4744f5d364ac4c40d19e1"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x6, 0x6, 0x8, [@generic={0x61, 0x31, "57cb766ca623ca83052156cb9c7b498e4f3c1bdb2e792876974f6d30b5ad10ed61889d8c9730c33fce8b4370f299409fe0b8e44b6579ea1d909d84c90500537d3a5391f13f905715df98d8a9fb8f974ecf5930b3b34b5ac22ef05a85907b23"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x1f, 0x3f, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5a, 0x5}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xd1, 0x9, 0x4, [@generic={0xa9, 0x11, "9849453c052f7d63fc99fda56c582f92715c513d04484133f4dc05d67bc1adbdb64a1488a81ea8112de70e970d5283a10fd2bcf27530ae6bd31550f6a779f1879a3b09aeb11ec2c0f2f72d3e166462214348f4a65f43e7dd675eab3f4f7264f175713041b23a80db4cf7451e7dcf683edc14d6b59e59bb76e5ae7b3d21b7c693e7fcec2825aca93f4b79882cce25b925ab2f0a55ed38be16fb1c1237e136b8fded659579d3f374"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x3f, 0x3f, 0x3}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x3, 0x40, 0x5, 0x10}, 0x3c, &(0x7f0000000400)={0x5, 0xf, 0x3c, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x3d, 0x2, 0xee97}, @generic={0x29, 0x10, 0x4, "6ed0559115e9f7da07a24273f0fc76d7790884ac5f233a9a4fd50717e89c7fd424d20eeaf709"}]}, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_connect$uac1(0x1, 0xde, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x8, 0x80, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x20}, [@mixer_unit={0x7, 0x24, 0x4, 0x6, 0x20, "46b4"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x4, "aa54334d22"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x1f, "db7e5a"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0x9, 0x7, 0x2, 0x6, 0x7], 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x2f9, 0x2, 0x4, 0x7}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0xd, 0x9, 0x7, 0x4, 0x5, 0x6], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x400, 0x7ff, 0x81, "72a05d0a"}, @as_header={0x7, 0x24, 0x1, 0xe9, 0x2, 0x1002}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x0, "b2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0x3f, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xc2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x1, 0x1a, {0x7, 0x25, 0x1, 0x3, 0x0, 0x101}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xa9, 0x4, 0x8, 0x10, 0x8}, 0xe2, &(0x7f0000000600)={0x5, 0xf, 0xe2, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "ae8ca897faf138602c11af1002886c19"}, @generic={0xc9, 0x10, 0x2, "9ece7c3f2d0b354c47f95c10c5bd22deda9e4edb2e5aa44594a8cfd6f71be63325c0f6c3b17d696b6cde4ad8338b8854f36d7f865fe71f37e2dc2111eca8e2b7ccf22113f2cf542310ce91a5ce518aadbfa4dcee99c50658d78f093d4078dca46552b1cebb4a33aaa01072803d39fa82334aedaabb722fbbb582f64c542680b93f7727a31bc329e1eae1d411326e7995569074452eee3ebe1678793d839b752c28f1a9e23ec81cb03279017e757607f7fc10698911e157ba3441621a7c6098f62ba59542c1e5"}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x280a}}, {0xad, &(0x7f0000000780)=@string={0xad, 0x3, "5ca2754e730a4d88f76008286a59e18f44ff79405732836d167480272f621c06136cd2a7d8f07ff3207698efe3fe852396f282f43c18faf404536004ca027c563bac15d6ca6cdcdfdf15cafdb77f0a80b01fd479b1aa6efc5a5d3d5ae75672e32f08d18b948618af1aa753dc3e08a70f0e391c1299217324d732db90dede362533ae5cb3cb9c825acf89f8e510fe3239ab157bec1eb03598102e5632f5c2ffb7f557d52db300177f0adfa2"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x445}}, {0xc5, &(0x7f0000000880)=@string={0xc5, 0x3, "93509fb81920f126ea5cf4bb8b548df53514b420d58e2bf1f6ed7ebd8e7163ecb5285869a2e4fef5e0fbd8dc4599fab73e2d94a60dbf54e30925c76da0a5746dcf7e5168c4c847e182eda77eb864d6bfd11bd6801759b2d6c0c71cb0c8a6c391b44de8b515f77d5644b03c8f26cd80f56c75e8345f78014fc1f19b4527060cae5fe0a2545cffa991142431d937943f136b1278f4b49a1a66d28d8111ed9e4a9f4fc7432c1d66ddc0310850e1e322f8dc620e7fc48077848ff02070d89fcc7ccde744c1"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x6b, &(0x7f0000000a00)=@string={0x6b, 0x3, "72089b132b7d1e90be2271ee7a5df81d652640b544c6e27beb720705e45a5806f107b05f2d6b953f3009b83c550bec8a66011aa8b846ec8701e13e8c165f42c0cb0bf04549fa2b86605aa517a2f4b9900f6e543249cd7c87facee93f901a7b0a385d2f319f800b4b5d"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x816}}]}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000bc0)={0x11, 0x0, &(0x7f0000000b80)}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000c00)=""/4096) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000001c40)=""/221) 14:57:59 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x50440) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x52, 0xfa, 0x50, 0x40, 0x1bbb, 0xb6, 0xdd47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0x44, 0x4f}}]}}]}}, 0x0) 14:57:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x0, 0x280400) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) [ 300.520645][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 300.730720][ T3128] usb 3-1: new high-speed USB device number 2 using dummy_hcd 14:57:59 executing program 4: syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x0, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_open_dev$evdev(&(0x7f0000001740)='/dev/input/event#\x00', 0x0, 0xc1) [ 300.890665][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 300.910542][ T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 300.929084][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.939177][ T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.959181][ T44] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a1f, bcdDevice=36.70 [ 300.969808][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.984705][ T3128] usb 3-1: Using ep0 maxpacket: 8 [ 301.007204][ T44] usb 6-1: config 0 descriptor?? [ 301.020534][ T3191] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 301.031390][ T9789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 301.111116][ T3128] usb 3-1: config 5 has an invalid interface number: 97 but max is 1 [ 301.119242][ T3128] usb 3-1: config 5 has an invalid interface number: 78 but max is 1 [ 301.127596][ T3128] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 301.137243][ T3128] usb 3-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 301.147678][ T3128] usb 3-1: config 5 has no interface number 0 [ 301.160843][ T3128] usb 3-1: config 5 has no interface number 1 [ 301.167043][ T3128] usb 3-1: config 5 interface 78 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 301.210518][ T3128] usb 3-1: config 5 interface 97 has no altsetting 0 [ 301.217256][ T3128] usb 3-1: config 5 interface 78 has no altsetting 0 [ 301.280831][ T9789] usb 4-1: Using ep0 maxpacket: 8 [ 301.301275][ T44] usb 6-1: string descriptor 0 read error: -71 [ 301.319007][ T44] ipaq 6-1:0.0: PocketPC PDA converter detected [ 301.336080][ T44] usb 6-1: active config #0 != 1 ?? [ 301.376433][ T44] usb 6-1: USB disconnect, device number 2 [ 301.397309][ T3128] usb 3-1: New USB device found, idVendor=0846, idProduct=9019, bcdDevice=be.4d [ 301.407474][ T9789] usb 4-1: config 5 has an invalid interface number: 97 but max is 1 [ 301.422228][ T9789] usb 4-1: config 5 has an invalid interface number: 78 but max is 1 [ 301.435116][ T3128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.461620][ T9789] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 301.478675][ T3128] usb 3-1: Product: syz [ 301.484120][ T3128] usb 3-1: Manufacturer: syz [ 301.488750][ T3128] usb 3-1: SerialNumber: syz [ 301.494888][ T9789] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 301.509078][ T9789] usb 4-1: config 5 has no interface number 0 [ 301.516322][ T9789] usb 4-1: config 5 has no interface number 1 [ 301.525865][ T9789] usb 4-1: config 5 interface 78 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 301.542396][ T9789] usb 4-1: config 5 interface 97 has no altsetting 0 [ 301.561331][ T3191] usb 2-1: New USB device found, idVendor=1bbb, idProduct=00b6, bcdDevice=dd.47 [ 301.599335][ T3191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.621221][ T3191] usb 2-1: Product: syz [ 301.625870][ T3191] usb 2-1: Manufacturer: syz [ 301.641598][ T3191] usb 2-1: SerialNumber: syz [ 301.656362][ T3191] usb 2-1: config 0 descriptor?? [ 301.701338][ T9789] usb 4-1: New USB device found, idVendor=0846, idProduct=9019, bcdDevice=be.4d [ 301.712568][ T3191] option 2-1:0.0: GSM modem (1-port) converter detected [ 301.727425][ T9789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.743517][ T9789] usb 4-1: Product: syz [ 301.747826][ T9789] usb 4-1: Manufacturer: syz [ 301.754815][T14575] udc-core: couldn't find an available UDC or it's busy [ 301.764608][ T9789] usb 4-1: SerialNumber: syz [ 301.769406][T14575] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 301.913782][ T3128] usb 3-1: USB disconnect, device number 2 [ 301.918303][ T2999] usb 2-1: USB disconnect, device number 2 [ 301.956469][ T2999] option 2-1:0.0: device disconnected [ 302.050462][ T9763] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.060660][T14584] udc-core: couldn't find an available UDC or it's busy [ 302.082840][T14584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.240077][ T9789] usb 4-1: USB disconnect, device number 2 [ 302.328845][T14646] udc-core: couldn't find an available UDC or it's busy [ 302.348604][T14646] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.441182][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 302.451185][ T9763] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 302.463192][ T9763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.474574][ T9763] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.485800][ T9763] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a1f, bcdDevice=36.70 [ 302.496086][ T9763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.512922][ T9763] usb 6-1: config 0 descriptor?? [ 302.634910][T14584] udc-core: couldn't find an available UDC or it's busy [ 302.650678][T14584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.700749][ T5] usb 2-1: new high-speed USB device number 3 using dummy_hcd 14:58:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5c}) 14:58:01 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x6}, 0x10) 14:58:01 executing program 4: bpf$OBJ_PIN_PROG(0x18, 0x0, 0x0) 14:58:01 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@generic={0x3}, @wireless={0xb}]}, 0x1, [{0x0, 0x0}]}) [ 302.780534][ T9763] usb 6-1: string descriptor 0 read error: -71 [ 302.788165][ T9763] ipaq 6-1:0.0: PocketPC PDA converter detected [ 302.847078][ T9763] usb 6-1: active config #0 != 1 ?? 14:58:01 executing program 4: socket(0x28, 0x0, 0x2) 14:58:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/bsg\x00', 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) [ 302.880579][ T9763] usb 6-1: USB disconnect, device number 3 [ 302.900476][ T9789] usb 4-1: new low-speed USB device number 3 using dummy_hcd 14:58:01 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000019c0), 0x10) 14:58:01 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540), 0x14) [ 303.150536][ T3128] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 303.251111][ T5] usb 2-1: New USB device found, idVendor=1bbb, idProduct=00b6, bcdDevice=dd.47 [ 303.265308][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.279564][ T5] usb 2-1: Product: syz [ 303.287155][ T5] usb 2-1: Manufacturer: syz [ 303.300536][ T5] usb 2-1: SerialNumber: syz [ 303.316238][ T5] usb 2-1: config 0 descriptor?? [ 303.369810][ T5] option 2-1:0.0: GSM modem (1-port) converter detected [ 303.371673][ T9789] usb 4-1: config 5 has an invalid interface number: 97 but max is 1 [ 303.390476][ T3128] usb 3-1: Using ep0 maxpacket: 8 [ 303.419993][ T9789] usb 4-1: config 5 has an invalid interface number: 78 but max is 1 [ 303.431580][ T9789] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 303.465724][ T9789] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 303.491258][ T9789] usb 4-1: config 5 has no interface number 0 [ 303.497367][ T9789] usb 4-1: config 5 has no interface number 1 [ 303.506586][ T9789] usb 4-1: config 5 interface 78 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 303.521850][ T9789] usb 4-1: config 5 interface 97 has no altsetting 0 [ 303.575438][ T5] usb 2-1: USB disconnect, device number 3 [ 303.601250][ T3128] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 303.609982][ T3128] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 303.625412][ T5] option 2-1:0.0: device disconnected [ 303.660009][ T3128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.710671][ T9789] usb 4-1: New USB device found, idVendor=0846, idProduct=9019, bcdDevice=be.4d [ 303.719754][ T9789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:58:02 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100), 0x10) 14:58:02 executing program 0: userfaultfd(0x80800) 14:58:02 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1a5, [{{0x9, 0x2, 0x6b}}]}}, 0x0) 14:58:02 executing program 3: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001ac0)=""/119) 14:58:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x88, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)="a0"}) [ 303.748745][ T9789] usb 4-1: Product: ꉜ乵ੳ衍惷⠈奪迡ｄ䁹㉗涃琖➀戯؜氓꟒瘠ﻣ⎅ᠼ匄Ѡˊ噼갻형泊ᗟ﷊羷耊ᾰ秔ꪱﱮ嵚娽囧࠯译蚔꼘ꜚ࠾ྦྷ㤎ሜ↙⑳㋗郛┶긳덜鳋媂觏︐㤲ᖫ뀞頵⸐㉖싵럿埵ⷕ³缗 14:58:02 executing program 0: bpf$OBJ_PIN_PROG(0x21, 0x0, 0x0) 14:58:02 executing program 5: syz_usb_connect_ath9k(0x3, 0x5d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3f1, [{{0x9, 0x2, 0xffffffffffffff85}}]}}, 0x0) [ 303.916959][ T9789] usb 4-1: Manufacturer: ⠊ [ 303.940382][ T9789] usb 4-1: SerialNumber: х [ 303.953490][ T3128] usb 3-1: string descriptor 0 read error: -22 [ 303.959784][ T3128] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.000576][ T9789] usb 4-1: can't set config #5, error -71 [ 304.020420][ T3128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.031179][ T9789] usb 4-1: USB disconnect, device number 3 [ 304.094551][ T3128] usb 3-1: 0:2 : does not exist [ 304.150633][ T9763] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 304.295349][ T5] usb 3-1: USB disconnect, device number 3 [ 304.332442][ T3191] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 304.443897][ T9763] usb 5-1: too many configurations: 165, using maximum allowed: 8 [ 304.581024][ T9763] usb 5-1: config index 0 descriptor too short (expected 107, got 72) [ 304.620686][ T3191] usb 6-1: too many configurations: 241, using maximum allowed: 8 [ 304.661623][ T9763] usb 5-1: config index 1 descriptor too short (expected 107, got 72) [ 304.711096][ T3191] usb 6-1: config index 0 descriptor too short (expected 65413, got 75) [ 304.719599][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.751185][ T9763] usb 5-1: config index 2 descriptor too short (expected 107, got 72) [ 304.811578][ T3191] usb 6-1: config index 1 descriptor too short (expected 65413, got 75) [ 304.819966][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.832524][ T9763] usb 5-1: config index 3 descriptor too short (expected 107, got 72) [ 304.921077][ T3191] usb 6-1: config index 2 descriptor too short (expected 65413, got 75) [ 304.929170][ T9763] usb 5-1: config index 4 descriptor too short (expected 107, got 72) [ 304.933264][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.041077][ T3191] usb 6-1: config index 3 descriptor too short (expected 65413, got 75) [ 305.049131][ T9763] usb 5-1: config index 5 descriptor too short (expected 107, got 72) [ 305.049455][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.131280][ T3128] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 305.150981][ T9763] usb 5-1: config index 6 descriptor too short (expected 107, got 72) [ 305.171038][ T3191] usb 6-1: config index 4 descriptor too short (expected 65413, got 75) [ 305.184065][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.241074][ T9763] usb 5-1: config index 7 descriptor too short (expected 107, got 72) [ 305.280502][ T3191] usb 6-1: config index 5 descriptor too short (expected 65413, got 75) [ 305.289046][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.380486][ T3191] usb 6-1: config index 6 descriptor too short (expected 65413, got 75) [ 305.389517][ T3128] usb 3-1: Using ep0 maxpacket: 8 [ 305.394799][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.431149][ T9763] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.440212][ T9763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.449450][ T9763] usb 5-1: Product: syz [ 305.454498][ T9763] usb 5-1: Manufacturer: syz [ 305.459100][ T9763] usb 5-1: SerialNumber: syz [ 305.481116][ T3191] usb 6-1: config index 7 descriptor too short (expected 65413, got 75) [ 305.489696][ T3191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.521342][ T9763] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.591108][ T3128] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 305.599819][ T3128] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 305.613232][ T3128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.671123][ T3191] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.680189][ T3191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.689563][ T3191] usb 6-1: Product: syz [ 305.694855][ T3191] usb 6-1: Manufacturer: syz [ 305.699637][ T3191] usb 6-1: SerialNumber: syz [ 305.742102][ T3191] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 14:58:04 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e4b6a244fba3cf64712050efb12d4287"}]}}) 14:58:04 executing program 1: setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) 14:58:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x3}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 14:58:04 executing program 0: socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0) [ 305.840550][ T3128] usb 3-1: string descriptor 0 read error: -71 [ 305.847000][ T3128] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.914964][ T3128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:58:04 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 14:58:04 executing program 0: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x6000190) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) 14:58:04 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) [ 305.980469][ T3128] usb 3-1: can't set config #1, error -71 [ 306.017223][ T3128] usb 3-1: USB disconnect, device number 4 [ 306.210466][ T9763] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.330607][ T3191] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.399533][ T3128] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 306.410630][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 306.436380][T14609] usb 5-1: USB disconnect, device number 2 [ 306.536874][ T5] usb 6-1: USB disconnect, device number 4 [ 306.640501][ T3128] usb 3-1: Using ep0 maxpacket: 8 [ 306.670425][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 306.790492][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 306.799884][ T44] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.811816][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.851159][ T3128] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 306.860486][ T3128] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.870792][ T3128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.980539][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.989600][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.004983][ T44] usb 4-1: Product: syz [ 307.009167][ T44] usb 4-1: SerialNumber: syz [ 307.031065][ T3128] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.040137][ T3128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.077340][ T3128] usb 3-1: Product: syz [ 307.082539][ T3128] usb 3-1: Manufacturer: syz [ 307.087162][ T3128] usb 3-1: SerialNumber: syz [ 307.290382][ T9763] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 307.298770][ T9763] ath9k_htc: Failed to initialize the device [ 307.307888][T14609] usb 5-1: ath9k_htc: USB layer deinitialized [ 307.370488][ T3191] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 307.377682][ T44] usb 4-1: 0:2 : does not exist [ 307.388809][ T3191] ath9k_htc: Failed to initialize the device [ 307.412110][ T5] usb 6-1: ath9k_htc: USB layer deinitialized [ 307.415828][ T44] usb 4-1: USB disconnect, device number 4 [ 307.490768][ T3128] usb 3-1: 0:2 : does not exist [ 307.547953][ T3128] usb 3-1: USB disconnect, device number 5 14:58:06 executing program 1: bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 14:58:06 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)) 14:58:06 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1a5, [{{0x9, 0x2, 0x6b}}]}}, 0x0) 14:58:06 executing program 5: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/244) 14:58:06 executing program 0: syz_usb_connect$uac1(0x5, 0xdf, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xe, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x67, "552919d184aa5718"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x40, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 'V', "c7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "e21f01"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x6, 0xf8, {0x7, 0x25, 0x1, 0x80, 0x1, 0x4abb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x6, 0x6a, "e3cd2bb7"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7f, 0x6, 'v', "beaa3d"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0xfd, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x5, "8decf2", 'sA'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x81, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfb, 0xf4, 0x3f, {0x7, 0x25, 0x1, 0x0, 0x29, 0x6}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x8, 0x3, 0xff, 0x1}, 0x5c, &(0x7f0000000180)={0x5, 0xf, 0x5c, 0x4, [@generic={0xb, 0x10, 0x4, "518829dc5530230e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0x40, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e4b6a244fba3cf64712050efb12d4287"}, @generic={0x2d, 0x10, 0x4, "81c20950133c24cd2e6fcdf8cf897f80e84b0b3a4b4e4f3564b967ee090b48eb96047c219c2622e439e7"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1058}}]}) [ 308.060530][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 308.092084][ T9552] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 308.140469][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 308.220470][T14609] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.310611][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 308.340542][ T9552] usb 4-1: Using ep0 maxpacket: 8 [ 308.420331][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 308.491228][ T9552] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.500678][ T9552] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.501050][T14609] usb 5-1: too many configurations: 165, using maximum allowed: 8 [ 308.513899][ T9552] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.520361][ T44] usb 1-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 308.539172][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.610439][T14609] usb 5-1: config index 0 descriptor too short (expected 107, got 72) [ 308.661317][ T5] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.671578][ T5] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.684718][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.690971][T14609] usb 5-1: config index 1 descriptor too short (expected 107, got 72) [ 308.702542][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.716793][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.724992][ T44] usb 1-1: Product: syz [ 308.729174][ T44] usb 1-1: Manufacturer: ၘ [ 308.730410][ T9552] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.745454][ T44] usb 1-1: SerialNumber: syz [ 308.746963][ T9552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.759399][ T9552] usb 4-1: Product: syz [ 308.761928][ T3191] Bluetooth: hci0: command 0x0406 tx timeout [ 308.764830][ T9552] usb 4-1: SerialNumber: syz [ 308.779081][ T3191] Bluetooth: hci1: command 0x0406 tx timeout [ 308.811071][T14609] usb 5-1: config index 2 descriptor too short (expected 107, got 72) [ 308.870465][ T5] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.879584][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.889590][ T5] usb 3-1: Product: syz [ 308.890624][T14609] usb 5-1: config index 3 descriptor too short (expected 107, got 72) [ 308.895478][ T5] usb 3-1: Manufacturer: syz [ 308.907403][ T5] usb 3-1: SerialNumber: syz 14:58:07 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x496f83, 0x0) 14:58:07 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f87fb3fc"}, 0x0, 0x0, @userptr, 0x200}) 14:58:07 executing program 5: bpf$OBJ_PIN_PROG(0x15, 0x0, 0x0) [ 308.980585][ T5] usb 3-1: can't set config #1, error -71 [ 308.985591][T14609] usb 5-1: config index 4 descriptor too short (expected 107, got 72) [ 309.006082][ T5] usb 3-1: USB disconnect, device number 6 14:58:07 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x40049409, 0x0) 14:58:07 executing program 5: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001b80)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) [ 309.080750][ T9552] usb 4-1: 0:2 : does not exist [ 309.097127][T14609] usb 5-1: config index 5 descriptor too short (expected 107, got 72) [ 309.118573][ T9552] usb 4-1: USB disconnect, device number 5 14:58:08 executing program 1: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x7800) 14:58:08 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b77248f1"}) [ 309.192145][ T44] usb 1-1: 0:2 : does not exist [ 309.211313][T14609] usb 5-1: config index 6 descriptor too short (expected 107, got 72) [ 309.245177][ T44] usb 1-1: USB disconnect, device number 2 14:58:08 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x0, 0x8, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e8ff4540"}, 0x0, 0x0, @fd}) [ 309.291289][T14609] usb 5-1: config index 7 descriptor too short (expected 107, got 72) 14:58:08 executing program 1: msgsnd(0x0, &(0x7f0000000240), 0x8, 0x0) [ 309.451122][T14609] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 309.470493][T14609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.499637][T14609] usb 5-1: Product: syz [ 309.518954][T14609] usb 5-1: Manufacturer: syz [ 309.534387][T14609] usb 5-1: SerialNumber: syz [ 309.570707][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 309.601294][T14609] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 309.861275][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 310.110492][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 310.180435][T14609] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 310.212484][ T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.244593][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.278870][ T5] usb 3-1: Product: syz [ 310.288197][ T5] usb 3-1: Manufacturer: syz [ 310.300678][ T5] usb 3-1: SerialNumber: syz [ 310.321137][ T44] usb 1-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 310.367853][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.381984][ T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.468888][ T3191] usb 5-1: USB disconnect, device number 3 [ 310.550473][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.560655][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.568772][ T44] usb 1-1: Product: syz [ 310.574952][ T44] usb 1-1: Manufacturer: ၘ [ 310.580132][ T44] usb 1-1: SerialNumber: syz [ 310.910603][ T44] usb 1-1: 0:2 : does not exist [ 310.929862][ T44] usb 1-1: USB disconnect, device number 3 14:58:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @dev}, 0x2c, {0x2, 0x0, @private}, 'bridge_slave_0\x00'}) 14:58:09 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "614c85a6"}) 14:58:09 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001340), &(0x7f0000001380)=0x4) 14:58:09 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) 14:58:09 executing program 0: syz_usb_connect$uac1(0x5, 0xdf, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0xe, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x1, 0x9, 0x67, "552919d184aa5718"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x40, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 'V', "c7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "e21f01"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x6, 0xf8, {0x7, 0x25, 0x1, 0x80, 0x1, 0x4abb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x6, 0x6a, "e3cd2bb7"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7f, 0x6, 'v', "beaa3d"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0xfd, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x5, "8decf2", 'sA'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x81, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfb, 0xf4, 0x3f, {0x7, 0x25, 0x1, 0x0, 0x29, 0x6}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x8, 0x3, 0xff, 0x1}, 0x5c, &(0x7f0000000180)={0x5, 0xf, 0x5c, 0x4, [@generic={0xb, 0x10, 0x4, "518829dc5530230e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0x40, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e4b6a244fba3cf64712050efb12d4287"}, @generic={0x2d, 0x10, 0x4, "81c20950133c24cd2e6fcdf8cf897f80e84b0b3a4b4e4f3564b967ee090b48eb96047c219c2622e439e7"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1058}}]}) [ 311.020443][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 14:58:09 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x541b, 0x0) 14:58:09 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)}, 0x48) 14:58:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) 14:58:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) [ 311.290443][T14609] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 311.302124][T14609] ath9k_htc: Failed to initialize the device [ 311.330334][ T3128] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 311.355326][ T3191] usb 5-1: ath9k_htc: USB layer deinitialized [ 311.429721][ T9552] usb 3-1: USB disconnect, device number 7 [ 311.451008][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.700827][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 311.871730][ T3128] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.881162][ T3128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.889292][ T3128] usb 6-1: Product: syz [ 311.895640][ T3128] usb 6-1: Manufacturer: syz [ 311.901299][ T3128] usb 6-1: SerialNumber: syz [ 311.929802][ T44] usb 1-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 311.947766][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.961227][ T3128] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.130821][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.139877][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.155757][ T44] usb 1-1: Product: syz [ 312.159951][ T44] usb 1-1: Manufacturer: ၘ [ 312.165063][ T44] usb 1-1: SerialNumber: syz [ 312.250482][ T5] usb 3-1: Service connection timeout for: 256 [ 312.256989][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 312.270104][ T5] ath9k_htc: Failed to initialize the device [ 312.276851][ T9552] usb 3-1: ath9k_htc: USB layer deinitialized 14:58:11 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe98, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) 14:58:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 14:58:11 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000180), 0x8}) 14:58:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @dev}, 0x2c, {0x2, 0x0, @private=0xa010102}, 'bridge_slave_0\x00'}) [ 312.541944][T14609] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.552041][ T44] usb 1-1: 0:2 : does not exist [ 312.569271][ T44] usb 1-1: USB disconnect, device number 4 [ 312.948912][ T3191] usb 6-1: USB disconnect, device number 5 [ 313.210770][ T9552] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 313.770310][T14609] usb 6-1: Service connection timeout for: 256 [ 313.776497][T14609] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 313.791546][T14609] ath9k_htc: Failed to initialize the device [ 313.797651][ T3191] usb 6-1: ath9k_htc: USB layer deinitialized [ 313.841072][ T9552] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.850459][ T9552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.858490][ T9552] usb 3-1: Product: syz [ 313.863650][ T9552] usb 3-1: Manufacturer: syz [ 313.868280][ T9552] usb 3-1: SerialNumber: syz [ 313.874789][ T2999] Bluetooth: hci2: command 0x0406 tx timeout [ 313.889268][ T2999] Bluetooth: hci3: command 0x0406 tx timeout [ 313.899162][ T2999] Bluetooth: hci4: command 0x0406 tx timeout [ 313.919435][ T2999] Bluetooth: hci5: command 0x0406 tx timeout [ 313.929477][ T9552] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 14:58:12 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 14:58:12 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f3d94aa4"}, 0x0, 0x0, @userptr}) 14:58:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:58:12 executing program 4: msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') 14:58:12 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)="c6", &(0x7f0000001100)}, 0x48) 14:58:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xd}) 14:58:13 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/bsg\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 14:58:13 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000010c0)="c6", 0x0}, 0x48) [ 314.540504][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.680516][ T3191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 314.746057][T15058] udc-core: couldn't find an available UDC or it's busy [ 314.754541][T15058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.764391][ T2999] usb 3-1: USB disconnect, device number 8 [ 314.930298][ T3191] usb 6-1: Using ep0 maxpacket: 8 [ 315.090337][ T3191] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.170370][ T3191] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 315.179220][ T3191] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 315.189920][ T3191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.350358][ T3191] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.359431][ T3191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.367952][ T3191] usb 6-1: Product: syz [ 315.372379][ T3191] usb 6-1: Manufacturer: syz [ 315.376980][ T3191] usb 6-1: SerialNumber: syz [ 315.620876][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 315.633585][ T5] ath9k_htc: Failed to initialize the device [ 315.640005][ T2999] usb 3-1: ath9k_htc: USB layer deinitialized [ 315.700573][ T3191] usb 6-1: 0:2 : does not exist [ 315.722295][ T3191] usb 6-1: USB disconnect, device number 6 14:58:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}) 14:58:14 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e4b6a244fba3cf64712050efb12d4287"}, @generic={0x14, 0x10, 0x4, "81c20950133c24cd2e6fcdf8cf897f80e8"}]}}) 14:58:14 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 14:58:14 executing program 3: syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 316.210376][ T9552] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 316.218053][ T9763] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 316.410477][T15155] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 316.470302][ T9552] usb 1-1: Using ep0 maxpacket: 8 [ 316.475515][ T9763] usb 4-1: Using ep0 maxpacket: 8 [ 316.600902][ T9763] usb 4-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 316.616997][ T9763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.670396][T15155] usb 6-1: Using ep0 maxpacket: 8 [ 316.701212][ T9552] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 316.709983][ T9552] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 316.725363][ T9552] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.821682][ T9763] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.831350][ T9763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.839440][ T9763] usb 4-1: Product: syz [ 316.845536][ T9763] usb 4-1: Manufacturer: syz [ 316.850955][ T9763] usb 4-1: SerialNumber: syz [ 316.871056][T15155] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.911024][ T9552] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.925055][ T9552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.934419][ T9552] usb 1-1: Product: syz [ 316.938603][ T9552] usb 1-1: Manufacturer: syz [ 316.945839][ T9552] usb 1-1: SerialNumber: syz [ 316.951961][T15155] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 316.964697][T15155] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 316.978343][T15155] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 14:58:15 executing program 5: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4c00) 14:58:15 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:58:15 executing program 1: clock_gettime(0x1, &(0x7f00000010c0)) 14:58:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) 14:58:16 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e4b6a244fba3cf64712050efb12d4287"}]}}) [ 317.200295][T15155] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.220559][ T9763] usb 4-1: 0:2 : does not exist 14:58:16 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000001380)) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001ac0)=""/119) [ 317.251785][T15155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.277848][ T9763] usb 4-1: USB disconnect, device number 6 [ 317.298697][T15155] usb 6-1: Product: syz [ 317.318864][T15155] usb 6-1: Manufacturer: syz [ 317.340662][ T9552] usb 1-1: 0:2 : does not exist 14:58:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x88, 0x0, &(0x7f0000000400)=[@enter_looper, @free_buffer, @increfs_done, @decrefs, @request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 317.375853][T15155] usb 6-1: can't set config #1, error -71 [ 317.389622][ T9552] usb 1-1: USB disconnect, device number 5 [ 317.402930][T15155] usb 6-1: USB disconnect, device number 7 14:58:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x7ffffff7) 14:58:16 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000180)=""/4096) [ 317.700382][ T2999] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 317.910566][T15155] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 317.960381][ T2999] usb 2-1: Using ep0 maxpacket: 8 [ 318.000291][T14609] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 318.150466][T15155] usb 4-1: Using ep0 maxpacket: 8 [ 318.161259][ T2999] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 318.170001][ T2999] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 318.228820][ T2999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.244055][T14609] usb 1-1: Using ep0 maxpacket: 8 [ 318.281453][T15155] usb 4-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 318.305365][T15155] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.410798][ T2999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.421669][ T2999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.429940][ T2999] usb 2-1: Product: syz [ 318.435107][ T2999] usb 2-1: Manufacturer: syz [ 318.439956][ T2999] usb 2-1: SerialNumber: syz [ 318.441164][T14609] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 318.459011][T14609] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 318.472567][T14609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.521114][T15155] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.530386][T15155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.538452][T15155] usb 4-1: Product: syz [ 318.542856][T15155] usb 4-1: Manufacturer: syz [ 318.547553][T15155] usb 4-1: SerialNumber: syz [ 318.640437][T14609] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.651021][T14609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.659023][T14609] usb 1-1: Product: syz [ 318.665096][T14609] usb 1-1: Manufacturer: syz [ 318.669714][T14609] usb 1-1: SerialNumber: syz [ 318.780404][ T2999] usb 2-1: 0:2 : does not exist [ 318.809847][ T2999] usb 2-1: USB disconnect, device number 4 [ 318.880387][T15155] usb 4-1: 0:2 : does not exist 14:58:17 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000002200)='/dev/bsg\x00', 0x10000, 0x0) 14:58:17 executing program 4: msgsnd(0x0, &(0x7f0000000240)={0x3}, 0x8, 0x0) 14:58:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x5421, 0x0) 14:58:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14:58:17 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e4b6a244fba3cf64712050efb12d4287"}, @generic={0x14, 0x10, 0x4, "81c20950133c24cd2e6fcdf8cf897f80e8"}]}}) [ 318.928870][T15155] usb 4-1: USB disconnect, device number 7 [ 319.030541][T14609] usb 1-1: 0:2 : does not exist [ 319.069075][T14609] usb 1-1: USB disconnect, device number 6 14:58:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) 14:58:17 executing program 5: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2142, 0x0) [ 319.520258][T14609] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 319.580334][ T2999] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 319.780407][T14609] usb 1-1: Using ep0 maxpacket: 8 [ 319.830372][ T2999] usb 2-1: Using ep0 maxpacket: 8 [ 319.990928][T14609] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 319.999777][T14609] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 320.012701][T14609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.050383][ T2999] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 320.059262][ T2999] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 320.069615][ T2999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.180749][T14609] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.189873][T14609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.199086][T14609] usb 1-1: Product: syz [ 320.203926][T14609] usb 1-1: Manufacturer: syz [ 320.208747][T14609] usb 1-1: SerialNumber: syz [ 320.261116][ T2999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.271037][ T2999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.279050][ T2999] usb 2-1: Product: syz [ 320.285247][ T2999] usb 2-1: Manufacturer: syz [ 320.290056][ T2999] usb 2-1: SerialNumber: syz 14:58:19 executing program 1: 14:58:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0fae570d0deece85e5d4360f0ff3b63ef0fe4e00ba420066ed66b891d7e4700f23c00f21f8663503000a000f23f80f060f30", 0xfffffffffffffd68}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:58:19 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x3f, {0x7}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x9, 0x8, 0x3, 0xff, 0x1}, 0x32, &(0x7f0000000180)={0x5, 0xf, 0x32, 0x4, [@generic={0xb, 0x10, 0x4, "518829dc5530230e"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x5, 0x40, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e4b6a244fba3cf64712050efb12d4287"}, @generic={0x3, 0x10, 0x4}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1058}}]}) 14:58:19 executing program 3: msgrcv(0x0, &(0x7f0000000500)={0x0, ""/128}, 0x88, 0x0, 0x0) 14:58:19 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0x10000, 0x0) [ 320.360289][ T2999] usb 2-1: can't set config #1, error -71 [ 320.368214][ T2999] usb 2-1: USB disconnect, device number 5 14:58:19 executing program 4: 14:58:19 executing program 1: [ 320.570778][T14609] usb 1-1: 0:2 : does not exist 14:58:19 executing program 2: [ 320.598606][T14609] usb 1-1: USB disconnect, device number 7 14:58:19 executing program 4: [ 320.710213][ T9763] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 321.000377][ T9763] usb 6-1: Using ep0 maxpacket: 8 14:58:19 executing program 0: 14:58:19 executing program 1: 14:58:19 executing program 2: 14:58:19 executing program 4: [ 321.221038][ T9763] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 321.229779][ T9763] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 14:58:20 executing program 4: [ 321.276973][ T9763] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.460869][ T9763] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.471000][ T9763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.479007][ T9763] usb 6-1: Product: syz [ 321.485605][ T9763] usb 6-1: Manufacturer: ၘ [ 321.491656][ T9763] usb 6-1: SerialNumber: syz [ 321.820377][ T9763] usb 6-1: 0:2 : does not exist [ 321.849753][ T9763] usb 6-1: USB disconnect, device number 8 [ 322.540218][T14609] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 322.820335][T14609] usb 6-1: Using ep0 maxpacket: 8 [ 323.040313][T14609] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 323.049100][T14609] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 323.061126][T14609] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.240416][T14609] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.249497][T14609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.258611][T14609] usb 6-1: Product: syz [ 323.263488][T14609] usb 6-1: Manufacturer: ၘ [ 323.268102][T14609] usb 6-1: SerialNumber: syz 14:58:22 executing program 5: 14:58:22 executing program 2: 14:58:22 executing program 1: 14:58:22 executing program 3: 14:58:22 executing program 0: 14:58:22 executing program 4: [ 323.470479][T14609] usb 6-1: 0:2 : does not exist 14:58:22 executing program 1: 14:58:22 executing program 2: 14:58:22 executing program 3: [ 323.516705][T14609] usb 6-1: USB disconnect, device number 9 14:58:22 executing program 0: 14:58:22 executing program 4: 14:58:22 executing program 5: 14:58:22 executing program 1: 14:58:22 executing program 0: 14:58:22 executing program 5: 14:58:22 executing program 2: 14:58:22 executing program 3: 14:58:22 executing program 4: 14:58:22 executing program 1: 14:58:22 executing program 0: 14:58:22 executing program 5: 14:58:22 executing program 4: 14:58:22 executing program 3: 14:58:22 executing program 2: 14:58:22 executing program 1: 14:58:22 executing program 0: 14:58:22 executing program 5: 14:58:22 executing program 4: 14:58:22 executing program 3: 14:58:22 executing program 2: 14:58:23 executing program 1: 14:58:23 executing program 0: 14:58:23 executing program 5: 14:58:23 executing program 2: 14:58:23 executing program 4: 14:58:23 executing program 3: 14:58:23 executing program 1: 14:58:23 executing program 5: 14:58:23 executing program 0: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:58:23 executing program 2: 14:58:23 executing program 1: 14:58:23 executing program 3: 14:58:23 executing program 4: 14:58:23 executing program 5: 14:58:23 executing program 0: 14:58:23 executing program 2: 14:58:23 executing program 1: 14:58:23 executing program 3: 14:58:23 executing program 4: 14:58:23 executing program 5: 14:58:23 executing program 2: 14:58:23 executing program 0: 14:58:23 executing program 1: 14:58:23 executing program 3: 14:58:23 executing program 2: 14:58:23 executing program 4: 14:58:23 executing program 5: 14:58:23 executing program 0: 14:58:23 executing program 1: 14:58:23 executing program 3: 14:58:23 executing program 2: 14:58:23 executing program 4: 14:58:23 executing program 5: 14:58:24 executing program 3: 14:58:24 executing program 4: 14:58:24 executing program 2: 14:58:24 executing program 1: 14:58:24 executing program 0: 14:58:24 executing program 5: 14:58:24 executing program 3: 14:58:24 executing program 1: 14:58:24 executing program 0: 14:58:24 executing program 4: 14:58:24 executing program 2: 14:58:24 executing program 5: 14:58:24 executing program 0: 14:58:24 executing program 3: 14:58:24 executing program 4: 14:58:24 executing program 2: 14:58:24 executing program 5: 14:58:24 executing program 1: 14:58:24 executing program 0: 14:58:24 executing program 4: 14:58:24 executing program 3: 14:58:24 executing program 5: 14:58:24 executing program 2: 14:58:24 executing program 1: 14:58:24 executing program 0: 14:58:24 executing program 3: 14:58:24 executing program 2: 14:58:24 executing program 5: 14:58:24 executing program 4: 14:58:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5cdd30c37f3e1e660200f7b988a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:58:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5cdd30c37f3e1e660200f7b90800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:58:25 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @local}, {0x2, 0x0, @local}, 0xd3c6b85bf6ebad7e, 0x0, 0x0, 0x0, 0xfffc}) 14:58:25 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 14:58:25 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x4000801) 14:58:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x2000c084) 14:58:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}], 0x1, 0x0) 14:58:25 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000700)={0x28, 0x0, 0x2710, @host}, 0x10) 14:58:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x2}, 0x40) 14:58:25 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) 14:58:25 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f00000001c0), 0x40) 14:58:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x22, 0x0, &(0x7f0000000200)="5cdd30c37f3e1e660200f7b908004fd18eb9a5baf76abe54ceeb9d97e3d85e1a810d", 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:58:25 executing program 3: 14:58:25 executing program 0: pipe(&(0x7f0000004680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x5}, 0x40) 14:58:25 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00028006000100000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) 14:58:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 14:58:25 executing program 0: socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x32b, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) [ 326.894467][T15576] device vlan2 entered promiscuous mode [ 326.929494][T15576] device bridge0 entered promiscuous mode [ 326.964152][T15576] bridge0: port 3(vlan2) entered blocking state [ 326.999191][T15576] bridge0: port 3(vlan2) entered disabled state [ 327.083400][T15576] device bridge0 left promiscuous mode [ 327.570831][T15584] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 14:58:26 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) close(r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 14:58:26 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000100)=@raw=[@generic={0x8, 0xe, 0x6, 0x800, 0x4}, @jmp={0x5, 0x0, 0x7, 0x9, 0x2, 0xfffffffffffffffe}, @generic={0x1f, 0x5, 0x7, 0x401, 0xbb4}], &(0x7f0000000180)='GPL\x00', 0x1, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x5, 0xffffffff}, 0x10}, 0x78) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @private}, {0x2, 0x20, @local}, {0x2, 0x0, @local}, 0xd3c6b85bf6ebad7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fff}) 14:58:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x22, 0x0, &(0x7f0000000200)="5cdd30c37f3e1e660200f7b908004fd18eb9a5baf76abe54ceeb9d97e3d85e1a810d", 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 327.618025][T15576] device vlan2 entered promiscuous mode [ 327.647815][T15576] device bridge0 entered promiscuous mode 14:58:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000001c0)=0x5f) [ 327.677044][T15576] bridge0: port 3(vlan2) entered blocking state [ 327.704912][T15576] bridge0: port 3(vlan2) entered disabled state [ 327.761589][T15576] device bridge0 left promiscuous mode 14:58:27 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') pipe(&(0x7f0000004680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 14:58:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000840)={'geneve1\x00', &(0x7f0000000800)=@ethtool_wolinfo={0x5, 0x0, 0x0, "7fad52fd2ed8"}}) 14:58:27 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 14:58:27 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000100)=@raw=[@generic={0x8, 0xe, 0x6, 0x800, 0x4}, @jmp={0x5, 0x0, 0x7, 0x9, 0x2, 0xfffffffffffffffe}, @generic={0x1f, 0x5, 0x7, 0x401, 0xbb4}], &(0x7f0000000180)='GPL\x00', 0x1, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x5, 0xffffffff}, 0x10}, 0x78) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @private}, {0x2, 0x20, @local}, {0x2, 0x0, @local}, 0xd3c6b85bf6ebad7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fff}) 14:58:27 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00028006000100000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) 14:58:27 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x22, 0x0, &(0x7f0000000200)="5cdd30c37f3e1e660200f7b908004fd18eb9a5baf76abe54ceeb9d97e3d85e1a810d", 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:58:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000404000000000000000000000b010000000000000001000084000014000000000002"], &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) 14:58:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x109, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 328.966683][T15626] device vlan2 entered promiscuous mode [ 328.998024][T15626] device bridge0 entered promiscuous mode 14:58:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x0, 0x10000, 0x2, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 14:58:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) [ 329.060253][T15626] bridge0: port 3(vlan2) entered blocking state [ 329.087546][T15626] bridge0: port 3(vlan2) entered disabled state [ 329.138820][T15626] device bridge0 left promiscuous mode 14:58:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x2000c084) 14:58:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) [ 329.218799][T15641] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? 14:58:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg$sock(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26008810) 14:58:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x74, r1, 0x401, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0xb00}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}}, 0x0) 14:58:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7}, 0x40) [ 329.753556][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:58:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x80000, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) [ 329.803933][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.854787][T15637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:58:28 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00028006000100000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) 14:58:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x0) 14:58:28 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rds(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffec0) 14:58:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 14:58:28 executing program 4: bpf$MAP_CREATE(0x17, &(0x7f00000001c0), 0x40) [ 330.161937][T15670] device vlan2 entered promiscuous mode [ 330.183259][T15670] device bridge0 entered promiscuous mode [ 330.205179][T15670] bridge0: port 3(vlan2) entered blocking state 14:58:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 330.219529][T15670] bridge0: port 3(vlan2) entered disabled state [ 330.256171][T15670] device bridge0 left promiscuous mode 14:58:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x2000c084) 14:58:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x6, &(0x7f0000006b80), 0x4) 14:58:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(r0, &(0x7f0000000100)=@l2tp, 0x80) 14:58:29 executing program 0: bpf$MAP_CREATE(0xf, 0x0, 0x0) 14:58:29 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000100)=@raw=[@generic={0x8, 0xe, 0x6, 0x800, 0x4}, @jmp={0x5, 0x0, 0x7, 0x9, 0x2, 0xfffffffffffffffe}, @generic={0x1f, 0x5, 0x7, 0x401, 0xbb4}], &(0x7f0000000180)='GPL\x00', 0x1, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x5, 0xffffffff}, 0x10}, 0x78) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @private}, {0x2, 0x20, @local}, {0x2, 0x4e23, @local}, 0xd3c6b85bf6ebad7e, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x5, 0x13}) 14:58:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6800000010000304000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="ffffa888000000002c00128009000100766c616e000000001c00028006000100000a00000c0002000e0000000a0000000400038008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100aa"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 330.876520][T15698] device vxcan0 entered promiscuous mode [ 330.903225][T15698] device vlan2 entered promiscuous mode [ 330.923684][T15698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 330.967127][T15698] device vxcan0 left promiscuous mode 14:58:30 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00028006000100000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) 14:58:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) epoll_create(0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000002c00128009000100766c616e000000001c00028006000100000000000c0002001c0000001b0000000400038008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) 14:58:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002041, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x400700) 14:58:30 executing program 2: bpf$MAP_CREATE(0xd, &(0x7f00000001c0), 0x40) 14:58:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x2000c084) [ 331.461075][T15698] device vxcan0 entered promiscuous mode [ 331.480269][T15698] device vlan2 entered promiscuous mode [ 331.505706][T15698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready 14:58:30 executing program 5: bpf$MAP_CREATE(0x11, &(0x7f00000001c0), 0x40) 14:58:30 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) [ 331.560344][T15698] device vxcan0 left promiscuous mode 14:58:30 executing program 5: bpf$MAP_CREATE(0x5, &(0x7f00000001c0), 0x40) 14:58:30 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1e99}) 14:58:30 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)) 14:58:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18}, 0x40) [ 332.005749][T15713] device vlan2 entered promiscuous mode [ 332.021202][T15713] device bridge0 entered promiscuous mode [ 332.032925][T15713] bridge0: port 3(vlan2) entered blocking state [ 332.039324][T15713] bridge0: port 3(vlan2) entered disabled state [ 332.077325][T15713] device bridge0 left promiscuous mode [ 332.353666][T15719] device vlan2 entered promiscuous mode [ 332.359272][T15719] device bridge0 entered promiscuous mode [ 332.381742][T15719] bridge0: port 3(vlan2) entered blocking state [ 332.388073][T15719] bridge0: port 3(vlan2) entered disabled state [ 332.435778][T15719] device bridge0 left promiscuous mode [ 332.584466][T15741] device vlan2 entered promiscuous mode [ 332.607283][T15741] device bridge0 entered promiscuous mode 14:58:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="6800000010000304000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="ffffa888000000002c00128009000100766c616e000000001c00028006000100000a00000c0002000e0000000a0000000400038008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100aa"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 332.635207][T15741] bridge0: port 3(vlan2) entered blocking state [ 332.655536][T15741] bridge0: port 3(vlan2) entered disabled state [ 332.679464][T15741] device bridge0 left promiscuous mode 14:58:31 executing program 1: pipe(&(0x7f0000004680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) pipe(&(0x7f0000004680)) socket(0x11, 0x3, 0x0) pipe(&(0x7f0000004680)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x647}, 0x0, 0x0, 0x0) [ 332.888821][T15754] device vxcan0 entered promiscuous mode [ 332.901844][T15754] device vlan2 entered promiscuous mode [ 332.908664][T15754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 332.934357][T15754] device vxcan0 left promiscuous mode 14:58:32 executing program 4: pipe(&(0x7f0000004680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) pipe(&(0x7f0000004680)) socket$caif_seqpacket(0x25, 0x5, 0x0) pipe(&(0x7f0000004680)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x647}, 0x0, 0x0, 0x0) 14:58:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1, 0xa000, 0x18a}, 0x40) 14:58:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = getpid() sendmmsg$unix(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40}], 0x1, 0x0) 14:58:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000800}, 0x2000c084) 14:58:32 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xff00000000000000}) 14:58:32 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 14:58:32 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f00000001c0), 0x40) 14:58:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 14:58:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1, 0xa000, 0x18a, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 14:58:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:58:32 executing program 1: pipe(&(0x7f0000004680)) pipe(&(0x7f00000012c0)) pipe(&(0x7f0000004680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001980)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x647}, 0x0, 0x0, 0x0) 14:58:32 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1e99}) 14:58:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x0) 14:58:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x5, 0x2}, 0x40) 14:58:32 executing program 0: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x4}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340), 0x8}) 14:58:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) 14:58:32 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa1000040) 14:58:32 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x9}, r0, 0x0, 0xffffffffffffffff, 0x0) 14:58:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:58:32 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x40400) 14:58:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 14:58:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x4) 14:58:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, &(0x7f0000000040)) 14:58:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x28, 0x0, &(0x7f0000000040)) 14:58:32 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:58:32 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003e80)='/dev/vcs\x00', 0x0, 0x0) setns(r0, 0x0) 14:58:32 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 14:58:33 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 14:58:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x4, 0x0, 0x0, 0x0) 14:58:33 executing program 2: clock_getres(0x5, &(0x7f0000000180)) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x100, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000200)=0x1) pselect6(0x40, &(0x7f0000000240)={0x4, 0x5, 0x76, 0x3f, 0x0, 0xbf, 0x0, 0x6}, &(0x7f0000000280)={0x4, 0x100, 0x0, 0x3ff, 0x401, 0x7fffffff, 0xdc, 0x800}, 0x0, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x8]}, 0x8}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcsu\x00', 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000440)={0x0, 0x0}) r1 = syz_open_dev$vcsa(0x0, 0x4f, 0xe2403) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x40000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mkdirat(r0, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) 14:58:33 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 14:58:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2, 0x3, 0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1701, 0xfffffffffffffef7) shutdown(r2, 0x1) r4 = dup3(r2, r3, 0x0) shutdown(r4, 0x0) 14:58:33 executing program 5: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) 14:58:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e40)={0x0, 0x0}) 14:58:33 executing program 1: mq_open(&(0x7f0000000000)='(\x00', 0x0, 0x0, 0x0) 14:58:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)) 14:58:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffea6, 0x0) 14:58:33 executing program 3: mq_open(&(0x7f0000000000)=')$%\\\x00', 0x40, 0x0, &(0x7f0000000040)={0x84, 0xffffffffbfffff16, 0x5, 0x4}) 14:58:33 executing program 2: semget(0x3, 0x0, 0x201) 14:58:33 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x90000, 0x0) 14:58:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 14:58:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) 14:58:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x38, 0x0, &(0x7f0000000040)) 14:58:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x12, 0x0, &(0x7f0000000040)) 14:58:33 executing program 2: mq_open(&(0x7f0000000000)=')$%\\\x00', 0x0, 0x0, &(0x7f0000000040)) 14:58:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x5}]}]}], {0x14}}, 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 14:58:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) [ 335.043722][T15887] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 335.091667][T15887] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:58:34 executing program 5: getgroups(0x2, &(0x7f0000000240)=[0x0, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x0, 0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff}}) 14:58:34 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') setns(r0, 0x80) 14:58:34 executing program 2: rt_sigprocmask(0x0, &(0x7f0000003dc0), &(0x7f0000003e00), 0x8) 14:58:34 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000008c0)=""/132) 14:58:34 executing program 4: fchownat(0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x400) 14:58:34 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) 14:58:34 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000100)) 14:58:34 executing program 4: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x5b6a222f8cc469e8) 14:58:34 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0xc000, 0x0) 14:58:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x101}, 0x14}}, 0x0) 14:58:34 executing program 0: wait4(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000004440)) 14:58:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0x0, 0xce, 0x0, 0x0) 14:58:34 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x9}, r0, 0x0, 0xffffffffffffffff, 0x0) 14:58:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 14:58:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 14:58:34 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) 14:58:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2d, 0x31, 0xb3, 0x0, 0x8ca, 0x103, 0x5f69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0xe8, 0xad}}]}}]}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) 14:58:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:58:34 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:58:34 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="88", 0x1, 0xfffffffffffffffc) 14:58:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf264", 0x54}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 14:58:34 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff}}]}}}]}}]}}, 0x0) 14:58:35 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 14:58:35 executing program 0: socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0) openat$mice(0xffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 14:58:35 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe6e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) process_vm_writev(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) [ 336.302263][T15960] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 14:58:35 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001c40)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "504a20f0"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x800, 0x70bd26, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x900}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000e0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb8, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x80, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3f, 0x0, 0x20, 0x23}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0xfe01}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x7f, 0x9, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x9a, 0x0, 0x0, [0x0, 0xff3f0f, 0x3f, 0x3ff0, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x139, 0x7, 0x81, 0x2, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffa, 0xf0f, 0x5, [0x3f, 0xc0, 0xf, 0xff3f0f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7, 0xc, 0x4, 0x10000, 0x620, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x0, 0x2, 0x3, "b7141100"}, 0xff, 0x1, @offset=0xdfab, 0x7, 0x0, r1}) [ 336.351177][T15960] device syz_tun entered promiscuous mode [ 336.370952][T15960] device macsec1 entered promiscuous mode [ 336.396612][T15960] device syz_tun left promiscuous mode [ 336.530276][ T3128] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 336.530290][ T9552] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 336.750227][ T2999] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 336.770438][ T3128] usb 5-1: Using ep0 maxpacket: 16 [ 336.810150][ T9552] usb 3-1: Using ep0 maxpacket: 16 [ 336.851524][T15155] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 336.890203][ T3128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.912957][ T3128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.930780][ T9552] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 337.000209][ T2999] usb 2-1: Using ep0 maxpacket: 16 [ 337.040682][T15155] usb 6-1: device descriptor read/64, error 18 [ 337.063145][T15982] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 337.111302][ T9552] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 337.122531][ T9552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.125049][T15982] device syz_tun entered promiscuous mode [ 337.152432][ T9552] usb 3-1: Product: syz [ 337.159142][T15982] device macsec1 entered promiscuous mode [ 337.164636][ T9552] usb 3-1: Manufacturer: syz [ 337.171237][T15982] device syz_tun left promiscuous mode [ 337.172802][ T9552] usb 3-1: SerialNumber: syz [ 337.200191][ T2999] usb 2-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.222857][ T2999] usb 2-1: config 1 interface 0 has no altsetting 0 [ 337.222955][ T3128] usb 5-1: string descriptor 0 read error: -22 [ 337.262985][ T3128] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 337.272564][ T9552] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 337.295565][ T3128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.310207][T15155] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 337.362955][ T3128] usbhid 5-1:1.0: can't add hid device: -22 [ 337.369377][ T3128] usbhid: probe of 5-1:1.0 failed with error -22 [ 337.381635][ T2999] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 337.399087][ T2999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.418770][ T2999] usb 2-1: Product: syz [ 337.430742][ T2999] usb 2-1: Manufacturer: syz [ 337.437380][ T2999] usb 2-1: SerialNumber: syz [ 337.486127][ T9552] usb 3-1: USB disconnect, device number 10 [ 337.510195][T15155] usb 6-1: device descriptor read/64, error 18 [ 337.582372][T15978] usb 5-1: USB disconnect, device number 4 [ 337.631664][T15155] usb usb6-port1: attempt power cycle 14:58:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) 14:58:36 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 337.920243][ T2999] usbhid 2-1:1.0: can't add hid device: -71 [ 337.926346][ T2999] usbhid: probe of 2-1:1.0 failed with error -71 [ 337.942129][ T2999] usb 2-1: USB disconnect, device number 6 [ 338.170122][ T9552] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 338.260073][ T3191] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 338.341694][T15155] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 338.361571][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 338.411018][ T9552] usb 1-1: Using ep0 maxpacket: 16 [ 338.440728][T15155] usb 6-1: Invalid ep0 maxpacket: 0 [ 338.490997][T14609] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 338.523261][ T3191] usb 3-1: Using ep0 maxpacket: 16 [ 338.530167][ T9552] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 338.590012][T15155] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 338.620160][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 338.660196][ T3191] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 338.681878][T15155] usb 6-1: Invalid ep0 maxpacket: 0 [ 338.687420][T15155] usb usb6-port1: unable to enumerate USB device [ 338.700110][ T9552] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 338.709171][ T9552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.719719][ T9552] usb 1-1: Product: syz [ 338.725202][ T9552] usb 1-1: Manufacturer: syz [ 338.729804][ T9552] usb 1-1: SerialNumber: syz [ 338.768182][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.772575][ T9552] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 338.779572][T14609] usb 2-1: Using ep0 maxpacket: 16 [ 338.792157][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.860569][ T3191] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 338.869658][ T3191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.880708][ T3191] usb 3-1: Product: syz [ 338.884897][ T3191] usb 3-1: Manufacturer: syz [ 338.889556][ T3191] usb 3-1: SerialNumber: syz [ 338.942879][ T3191] usbhid 3-1:1.0: couldn't find an input interrupt endpoint 14:58:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66ba76b699d3a483904811c5709efa01fa13e4ddc813f76684d3d1529fea5d78b38267db0082270f62b41b50981b0313b668585ad32e8977c5f7c2dc112136b8f7392223205ad86f4a9de1cddbd119f26acc2f", 0xffffffcd, 0x11, 0x0, 0x170) [ 339.003796][ T9552] usb 1-1: USB disconnect, device number 8 [ 339.040983][T14609] usb 2-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.076520][T14609] usb 2-1: config 1 interface 0 has no altsetting 0 [ 339.090083][ T44] usb 5-1: string descriptor 0 read error: -22 [ 339.096450][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 339.126702][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.152504][T15155] usb 3-1: USB disconnect, device number 11 14:58:38 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) 14:58:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c739d187be7fede2e70abc9944edf099471021894a286200cf118fc95ffda3c5c7581968691a170393c69cfeba5233c", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 339.183362][ T44] usbhid 5-1:1.0: can't add hid device: -22 [ 339.189453][ T44] usbhid: probe of 5-1:1.0 failed with error -22 14:58:38 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 339.290810][T14609] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 339.310353][T14609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.355156][T14609] usb 2-1: Product: syz [ 339.369036][T14609] usb 2-1: Manufacturer: syz [ 339.384686][T14609] usb 2-1: SerialNumber: syz 14:58:38 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001c40)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "504a20f0"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb8, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x80, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3f, 0x0, 0x20, 0x23}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0xfe01}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x7f, 0x9, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x9a, 0x0, 0x0, [0x0, 0xff3f0f, 0x3f, 0x3ff0, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x139, 0x7, 0x81, 0x2, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffa, 0xf0f, 0x5, [0x3f, 0xc0, 0xf, 0xff3f0f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7, 0xc, 0x4, 0x10000, 0x620, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x0, 0x2, 0x3, "b7141100"}, 0xff, 0x1, @offset=0xdfab, 0x7, 0x0, r0}) [ 339.409486][ T44] usb 5-1: USB disconnect, device number 5 14:58:38 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 339.511490][T14609] usb 2-1: can't set config #1, error -71 [ 339.529180][T14609] usb 2-1: USB disconnect, device number 7 [ 339.780136][T15155] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 339.791496][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 339.830111][T15978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 339.960120][T14609] usb 2-1: new high-speed USB device number 8 using dummy_hcd 14:58:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c", 0x55}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 340.020122][T15155] usb 1-1: Using ep0 maxpacket: 16 [ 340.030069][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 340.080754][T15978] usb 3-1: Using ep0 maxpacket: 16 [ 340.140925][T15155] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.180537][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 14:58:39 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) [ 340.209455][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:58:39 executing program 5: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4083, 0xff3}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) [ 340.251121][T14609] usb 2-1: Using ep0 maxpacket: 16 [ 340.300271][T15978] usb 3-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.314584][T15978] usb 3-1: config 1 interface 0 has no altsetting 0 [ 340.323217][T15155] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 340.333805][T15155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.342659][T15155] usb 1-1: Product: syz [ 340.348059][T15155] usb 1-1: Manufacturer: syz [ 340.358553][T15155] usb 1-1: SerialNumber: syz [ 340.403882][T15155] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 340.411206][T14609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.424435][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 340.451271][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.459308][ T44] usb 5-1: Product: syz [ 340.474251][ T44] usb 5-1: Manufacturer: syz [ 340.482796][ T44] usb 5-1: SerialNumber: syz [ 340.491720][T15978] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 340.511412][T15978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.537785][T15978] usb 3-1: Product: syz [ 340.549104][T15978] usb 3-1: Manufacturer: syz [ 340.558987][T15978] usb 3-1: SerialNumber: syz 14:58:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be87", 0x51}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 340.620698][ T3128] usb 1-1: USB disconnect, device number 9 [ 340.630181][T14609] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 340.639313][T14609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.687168][T14609] usb 2-1: Product: syz [ 340.693660][T14609] usb 2-1: Manufacturer: syz [ 340.698522][T14609] usb 2-1: SerialNumber: syz [ 340.762876][T14609] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 340.786369][ T44] usbhid 5-1:1.0: can't add hid device: -22 [ 340.793120][ T44] usbhid: probe of 5-1:1.0 failed with error -22 [ 340.811570][ T44] usb 5-1: USB disconnect, device number 6 [ 340.966106][ T3128] usb 2-1: USB disconnect, device number 8 [ 341.030252][T15978] usbhid 3-1:1.0: can't add hid device: -71 [ 341.036603][T15978] usbhid: probe of 3-1:1.0 failed with error -71 [ 341.053840][T15978] usb 3-1: USB disconnect, device number 12 14:58:40 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 14:58:40 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) [ 341.550390][ T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd 14:58:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xf}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c739d187be7fede2e70abc9944edf099471021894a286200cf118fc95ffda3c5c7581968691a170393c69cfeba5233c", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 341.850587][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 341.881275][T14609] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 341.910095][T15155] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 342.000125][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.011815][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.130317][T14609] usb 3-1: Using ep0 maxpacket: 16 [ 342.149964][T15155] usb 2-1: Using ep0 maxpacket: 16 [ 342.210263][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 342.221799][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.233553][ T44] usb 5-1: Product: syz [ 342.237995][ T44] usb 5-1: Manufacturer: syz [ 342.245044][ T44] usb 5-1: SerialNumber: syz 14:58:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e352", 0x4b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 14:58:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f00008e15018058"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.340686][T14609] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.350347][T15155] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.441120][ T44] usbhid 5-1:1.0: can't add hid device: -22 [ 342.447235][ T44] usbhid: probe of 5-1:1.0 failed with error -22 [ 342.458251][ T44] usb 5-1: USB disconnect, device number 7 [ 342.532617][T14609] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 342.540649][T15155] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 342.546352][T14609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.550859][T15155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.569395][T14609] usb 3-1: Product: syz [ 342.588074][T14609] usb 3-1: Manufacturer: syz [ 342.590194][T15155] usb 2-1: Product: syz [ 342.599318][T14609] usb 3-1: SerialNumber: syz [ 342.600001][T15155] usb 2-1: Manufacturer: syz [ 342.613440][T15155] usb 2-1: SerialNumber: syz [ 342.662525][T14609] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 342.672377][T15155] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 14:58:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f00008e15018058"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.867354][ T44] usb 3-1: USB disconnect, device number 13 [ 342.877591][T15155] usb 2-1: USB disconnect, device number 9 [ 343.649977][T15155] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 343.657715][ T9552] usb 3-1: new high-speed USB device number 14 using dummy_hcd 14:58:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f00008e15018058"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:58:42 executing program 0: syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000240)) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 343.899984][ T9552] usb 3-1: Using ep0 maxpacket: 16 [ 343.905369][T15155] usb 2-1: Using ep0 maxpacket: 16 [ 344.079959][T15978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 344.111135][ T9552] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 344.124420][T15155] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 344.291061][T15155] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 344.301196][ T9552] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 344.319969][ T9552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.327996][ T9552] usb 3-1: Product: syz [ 344.332323][T15155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.340566][T15978] usb 1-1: Using ep0 maxpacket: 16 [ 344.349970][T15155] usb 2-1: Product: syz [ 344.354182][T15155] usb 2-1: Manufacturer: syz [ 344.358876][T15155] usb 2-1: SerialNumber: syz [ 344.365382][ T9552] usb 3-1: Manufacturer: syz [ 344.370679][ T9552] usb 3-1: SerialNumber: syz [ 344.432866][ T9552] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 344.442989][T15155] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 14:58:43 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) [ 344.500122][T15978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.529801][ T44] usb 3-1: USB disconnect, device number 14 [ 344.590076][T15978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:58:43 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) [ 344.652117][ T9552] usb 2-1: USB disconnect, device number 10 14:58:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f00008e15018058"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:58:43 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x1, 0x0) 14:58:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a", 0x4c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 344.860645][T15978] usb 1-1: string descriptor 0 read error: -22 [ 344.866898][T15978] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 344.886599][T15978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.955164][T15978] usbhid 1-1:1.0: can't add hid device: -22 [ 344.966748][T15978] usbhid: probe of 1-1:1.0 failed with error -22 [ 345.077373][ T44] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 345.140238][ T9552] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 345.159449][T15978] usb 1-1: USB disconnect, device number 10 [ 345.360015][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 345.390049][ T9552] usb 2-1: Using ep0 maxpacket: 16 14:58:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c739df59fb6de9692b255e95b24187be7fede2e70abc9944edf099471020000000000000018fc95ffda3c5c7581968691a170393c69cfeba5233c29b98f50e172cb42ea3d704f245af0e736e3833c298a5ae947b5d94c036f10c4889e3ed7956906a311375c4c838c184046e5f1eb4f5dfe8dc3468e05eccff881b2b107cc9021b179688be70fb4d5e3dded244d8f93f4fc12e90634f55053e3fe7ed78e295bcdc588c3", 0xf8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 345.510694][ T9552] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 345.570722][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.591732][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 14:58:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x60, r1, 0xe01, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x0, @NL80211_PKTPAT_PATTERN={0x2d, 0x2, "213c8cdb0858a39ebd0f54ff86d3fbc178d7d66e4e5088ce74930f897535b231cb8f21ee9e9d660be4"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x60}}, 0x0) [ 345.710053][ T9552] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 345.736850][ T9552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.762545][ T9552] usb 2-1: Product: syz [ 345.781690][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 345.798955][ T9552] usb 2-1: Manufacturer: syz [ 345.799665][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.804360][ T9552] usb 2-1: SerialNumber: syz [ 345.833704][ T44] usb 3-1: Product: syz [ 345.845797][T16324] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 345.851225][ T44] usb 3-1: Manufacturer: syz [ 345.859238][ T44] usb 3-1: SerialNumber: syz [ 345.862382][ T9552] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 14:58:44 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 345.933920][T16334] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 14:58:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x60, r1, 0xe01, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x0, @NL80211_PKTPAT_PATTERN={0x2d, 0x2, "213c8cdb0858a39ebd0f54ff86d3fbc178d7d66e4e5088ce74930f897535b231cb8f21ee9e9d660be4"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x60}}, 0x0) [ 346.001193][T16336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.052185][T16338] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 346.071073][ T9552] usb 2-1: USB disconnect, device number 11 14:58:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001c40)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "504a20f0"}, 0x0, 0x0, @fd}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x900}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000e0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb8, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x80, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3f, 0x0, 0x20, 0x23}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0xfe01}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x7f, 0x9, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x9a, 0x0, 0x0, [0x0, 0xff3f0f, 0x3f, 0x3ff0, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x139, 0x7, 0x81, 0x2, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffa, 0xf0f, 0x5, [0x3f, 0xc0, 0xf, 0xff3f0f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) [ 346.160383][ T44] usbhid 3-1:1.0: can't add hid device: -22 [ 346.167924][ T44] usbhid: probe of 3-1:1.0 failed with error -22 [ 346.201987][ T44] usb 3-1: USB disconnect, device number 15 14:58:45 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 346.322280][T16336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.415035][T16357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.510188][ T3191] usb 1-1: new high-speed USB device number 11 using dummy_hcd 14:58:45 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 346.750000][ T3191] usb 1-1: Using ep0 maxpacket: 16 [ 346.789326][T16365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.850036][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 346.899947][T15155] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 346.960879][ T3191] usb 1-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.981774][ T3191] usb 1-1: config 1 interface 0 has no altsetting 0 [ 347.120055][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 347.140078][T15155] usb 3-1: Using ep0 maxpacket: 16 [ 347.160295][ T3191] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 347.170845][ T3191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.179136][ T3191] usb 1-1: Product: syz [ 347.183889][ T3191] usb 1-1: Manufacturer: syz [ 347.188823][ T3191] usb 1-1: SerialNumber: syz [ 347.241121][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 347.340780][T15155] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.351912][T15155] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.470955][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 347.481175][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.489284][ T44] usb 2-1: Product: syz [ 347.494880][ T44] usb 2-1: Manufacturer: syz [ 347.499547][ T44] usb 2-1: SerialNumber: syz [ 347.520952][T15155] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 347.536098][T15155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.548308][T15155] usb 3-1: Product: syz [ 347.553684][T15155] usb 3-1: Manufacturer: syz [ 347.558617][T15155] usb 3-1: SerialNumber: syz [ 347.562587][ T44] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 14:58:46 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 347.670126][T15155] usb 3-1: can't set config #1, error -71 [ 347.687752][T15155] usb 3-1: USB disconnect, device number 16 [ 347.709664][ T3191] usbhid 1-1:1.0: can't add hid device: -71 [ 347.716069][ T3191] usbhid: probe of 1-1:1.0 failed with error -71 [ 347.738674][ T3191] usb 1-1: USB disconnect, device number 11 14:58:46 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 14:58:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 347.788687][ T9552] usb 2-1: USB disconnect, device number 12 [ 347.863200][T16404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:58:46 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) [ 348.099946][T15155] usb 3-1: new high-speed USB device number 17 using dummy_hcd 14:58:47 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 348.239918][T15978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 348.268705][T16415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.280612][ T9552] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.349948][T15155] usb 3-1: Using ep0 maxpacket: 16 [ 348.380165][ T3191] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 348.470518][T15155] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.483762][T15978] usb 1-1: Using ep0 maxpacket: 16 14:58:47 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x1, [{0x0, 0x0}]}) [ 348.529914][ T9552] usb 2-1: Using ep0 maxpacket: 16 14:58:47 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 348.639990][ T3191] usb 6-1: Using ep0 maxpacket: 16 [ 348.642584][T15155] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 348.658725][T15155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.677724][T15155] usb 3-1: Product: syz [ 348.683947][T15978] usb 1-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.697456][T15155] usb 3-1: Manufacturer: syz [ 348.705176][T15155] usb 3-1: SerialNumber: syz [ 348.711013][T15978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 348.714812][T16422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.743300][ T9552] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.860736][ T3191] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.873918][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 348.880810][T15978] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 348.897512][T15978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.910945][T15978] usb 1-1: Product: syz [ 348.915420][T15978] usb 1-1: Manufacturer: syz [ 348.922338][T15978] usb 1-1: SerialNumber: syz [ 348.941753][ T9552] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 348.951571][ T9552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.959631][ T9552] usb 2-1: Product: syz [ 348.967579][ T9552] usb 2-1: Manufacturer: syz [ 348.974410][ T9552] usb 2-1: SerialNumber: syz [ 349.002576][T15155] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 349.024860][T15155] usb 3-1: USB disconnect, device number 17 [ 349.052734][ T9552] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 349.070144][ T3191] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 349.095203][ T3191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:58:47 executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 349.139330][ T3191] usb 6-1: Product: syz [ 349.153522][ T3191] usb 6-1: Manufacturer: syz [ 349.159939][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 349.172647][ T3191] usb 6-1: SerialNumber: syz 14:58:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001c40)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "504a20f0"}, 0x0, 0x0, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x900}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000e0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb8, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x80, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3f, 0x0, 0x20, 0x23}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0xfe01}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x7f, 0x9, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x9a, 0x0, 0x0, [0x0, 0xff3f0f, 0x3f, 0x3ff0, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x139, 0x7, 0x81, 0x2, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7fffffa, 0xf0f, 0x5, [0x3f, 0xc0, 0xf, 0xff3f0f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c01}}]}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x7, 0xc, 0x4, 0x10000, 0x620, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x0, 0x2, 0x3, "b7141100"}, 0xff, 0x1, @offset=0xdfab, 0x7, 0x0, r1}) socket$l2tp6(0xa, 0x2, 0x73) [ 349.193440][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.263305][ T3191] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 349.267802][ T9552] usb 2-1: USB disconnect, device number 13 [ 349.400152][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.412925][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.420214][T15978] usbhid 1-1:1.0: can't add hid device: -71 [ 349.429214][T15978] usbhid: probe of 1-1:1.0 failed with error -71 [ 349.444965][T15978] usb 1-1: USB disconnect, device number 12 [ 349.470674][ T3191] usb 6-1: USB disconnect, device number 14 14:58:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 349.603349][T16476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.660840][ T44] usb 4-1: string descriptor 0 read error: -22 [ 349.667130][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 349.688326][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.752916][ T44] usbhid 4-1:1.0: can't add hid device: -22 [ 349.759013][ T44] usbhid: probe of 4-1:1.0 failed with error -22 [ 349.779943][ T17] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 349.849975][T15978] usb 1-1: new high-speed USB device number 13 using dummy_hcd 14:58:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 349.966550][ T44] usb 4-1: USB disconnect, device number 8 [ 349.990351][T16490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.049951][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 350.069997][ T2999] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 350.090392][T15978] usb 1-1: Using ep0 maxpacket: 16 [ 350.210588][ T17] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.250107][ T3191] usb 6-1: new high-speed USB device number 15 using dummy_hcd 14:58:49 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) [ 350.290697][T15978] usb 1-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.309241][T15978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 350.319959][ T2999] usb 2-1: Using ep0 maxpacket: 16 [ 350.392037][T16498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.410650][ T17] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 350.427489][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.448831][ T17] usb 3-1: Product: syz [ 350.459106][ T17] usb 3-1: Manufacturer: syz [ 350.465733][ T17] usb 3-1: SerialNumber: syz [ 350.490138][ T3191] usb 6-1: Using ep0 maxpacket: 16 [ 350.493032][T15978] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 350.517886][T15978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.527378][ T2999] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.540709][T15978] usb 1-1: Product: syz [ 350.545708][T15978] usb 1-1: Manufacturer: syz [ 350.552437][T15978] usb 1-1: SerialNumber: syz 14:58:49 executing program 2: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001c40)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "504a20f0"}, 0x0, 0x0, @fd}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x800, 0x70bd26, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x900}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000e0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb8, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x182, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3f, 0x0, 0x0, 0x23}, 0x4f, &(0x7f0000000140)={0x5, 0xf, 0x4f, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7f, 0x0, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3f, 0x0, 0xffc0ff]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0xf0f, 0x0, [0x3f, 0x0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x0, 0x2}]}}) [ 350.713575][ T2999] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 350.730922][ T3191] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.750538][ T9552] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 350.753456][ T17] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 350.759427][ T2999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.789720][ T17] usb 3-1: USB disconnect, device number 18 [ 350.855545][ T2999] usb 2-1: Product: syz 14:58:49 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 14:58:49 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000780)=[{}], 0x1, 0x0, &(0x7f00000007c0), 0x8) [ 350.877153][ T2999] usb 2-1: Manufacturer: syz [ 350.894937][ T2999] usb 2-1: SerialNumber: syz [ 350.949969][ T2999] usb 2-1: can't set config #1, error -71 [ 350.950690][ T3191] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 350.970909][ T2999] usb 2-1: USB disconnect, device number 14 [ 350.996382][ T3191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.001665][ T9552] usb 4-1: Using ep0 maxpacket: 16 [ 351.026087][ T3191] usb 6-1: Product: syz [ 351.040272][T15978] usbhid 1-1:1.0: can't add hid device: -71 [ 351.042968][ T3191] usb 6-1: Manufacturer: syz [ 351.046905][T15978] usbhid: probe of 1-1:1.0 failed with error -71 [ 351.082323][T15978] usb 1-1: USB disconnect, device number 13 [ 351.086544][ T3191] usb 6-1: SerialNumber: syz 14:58:49 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}}) 14:58:49 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b0001000000000904000001dbcc7a00090585"], 0x0) [ 351.144436][ T3191] usb 6-1: can't set config #1, error -71 [ 351.156237][ T3191] usb 6-1: USB disconnect, device number 15 [ 351.200209][ T9552] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.218273][ T9552] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.229938][ T17] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 351.460126][ T2999] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 351.481162][ T9552] usb 4-1: string descriptor 0 read error: -22 [ 351.487456][ T9552] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 351.500122][ T17] usb 3-1: Using ep0 maxpacket: 16 [ 351.535780][ T9552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.600722][ T3191] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 351.621306][T14609] usb 1-1: new high-speed USB device number 14 using dummy_hcd 14:58:50 executing program 3: 14:58:50 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x0, 0xbf, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0xa79}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x80, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x0, 0x0, 0x20, 0x23}, 0x42, &(0x7f0000000140)={0x5, 0xf, 0x42, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x7f, 0x9, 0x8, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x9a, 0x0, 0x0, [0x0, 0x0, 0x3f, 0x0, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x139, 0x7, 0x0, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x5}]}, 0x1, [{0x0, 0x0}]}) [ 351.708713][ T9552] usb 4-1: can't set config #1, error -71 [ 351.719849][ T2999] usb 5-1: Using ep0 maxpacket: 8 [ 351.740712][ T17] usb 3-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.746794][ T9552] usb 4-1: USB disconnect, device number 9 [ 351.799707][ T17] usb 3-1: config 1 interface 0 has no altsetting 0 14:58:50 executing program 3: [ 351.850997][ T2999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 351.860740][ T3191] usb 6-1: Using ep0 maxpacket: 16 [ 351.874550][T14609] usb 1-1: Using ep0 maxpacket: 16 [ 352.002400][ T17] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 352.021572][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.030817][ T2999] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 352.040879][ T17] usb 3-1: Product: syz [ 352.050881][ T2999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.054503][ T17] usb 3-1: Manufacturer: syz [ 352.071481][ T3191] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 352.085700][ T2999] usb 5-1: Product: syz [ 352.092087][T15155] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 352.100873][T14609] usb 1-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.102230][ T2999] usb 5-1: Manufacturer: syz [ 352.113981][ T17] usb 3-1: SerialNumber: syz [ 352.135672][T14609] usb 1-1: config 1 interface 0 has no altsetting 0 [ 352.155080][ T2999] usb 5-1: SerialNumber: syz [ 352.176832][ T2999] usb 5-1: config 0 descriptor?? [ 352.231877][ T2999] powermate: probe of 5-1:0.0 failed with error -5 [ 352.280719][ T3191] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 352.310184][ T3191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.318443][ T3191] usb 6-1: Product: syz [ 352.330027][T15155] usb 2-1: Using ep0 maxpacket: 16 [ 352.330680][T14609] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 14:58:51 executing program 0: 14:58:51 executing program 3: [ 352.380906][ T3191] usb 6-1: Manufacturer: syz [ 352.385643][ T3191] usb 6-1: SerialNumber: syz [ 352.392367][T14609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.436476][T14609] usb 1-1: Product: syz [ 352.460478][T14609] usb 1-1: Manufacturer: syz [ 352.465111][T14609] usb 1-1: SerialNumber: syz [ 352.474170][ T3191] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 352.513776][ T3191] usb 5-1: USB disconnect, device number 8 [ 352.530200][T15155] usb 2-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.530917][T14609] usb 1-1: can't set config #1, error -71 14:58:51 executing program 3: [ 352.564065][T15155] usb 2-1: config 1 interface 0 has no altsetting 0 [ 352.580264][ T17] usbhid 3-1:1.0: can't add hid device: -71 [ 352.586340][ T17] usbhid: probe of 3-1:1.0 failed with error -71 [ 352.624895][ T17] usb 3-1: USB disconnect, device number 19 [ 352.643587][T14609] usb 1-1: USB disconnect, device number 14 14:58:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) [ 352.780853][ T3191] usb 6-1: USB disconnect, device number 16 14:58:51 executing program 2: 14:58:51 executing program 3: 14:58:51 executing program 0: [ 352.832470][T15155] usb 2-1: string descriptor 0 read error: -22 [ 352.838811][T15155] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 352.864435][T15155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.220093][T15155] usbhid 2-1:1.0: can't add hid device: -71 [ 353.227657][T15155] usbhid: probe of 2-1:1.0 failed with error -71 [ 353.239980][T14609] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 353.270454][T15155] usb 2-1: USB disconnect, device number 15 14:58:52 executing program 5: [ 353.479963][T14609] usb 5-1: Using ep0 maxpacket: 8 [ 353.610117][T14609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 353.800076][T14609] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 353.810351][T14609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.819456][T14609] usb 5-1: Product: syz [ 353.829849][T14609] usb 5-1: Manufacturer: syz [ 353.834486][T14609] usb 5-1: SerialNumber: syz [ 353.847190][T14609] usb 5-1: config 0 descriptor?? [ 353.892092][T14609] powermate: probe of 5-1:0.0 failed with error -5 [ 353.910028][T15155] usb 2-1: new high-speed USB device number 16 using dummy_hcd 14:58:52 executing program 4: 14:58:52 executing program 0: [ 354.095451][ T2999] usb 5-1: USB disconnect, device number 9 [ 354.149876][T15155] usb 2-1: Using ep0 maxpacket: 16 [ 354.350679][T15155] usb 2-1: config 1 interface 0 altsetting 71 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.364051][T15155] usb 2-1: config 1 interface 0 has no altsetting 0 [ 354.610373][T15155] usb 2-1: string descriptor 0 read error: -22 [ 354.616675][T15155] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 354.627879][T15155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 14:58:53 executing program 1: 14:58:53 executing program 3: 14:58:53 executing program 2: 14:58:53 executing program 5: 14:58:53 executing program 4: 14:58:53 executing program 0: 14:58:53 executing program 5: [ 354.860118][T15155] usbhid 2-1:1.0: can't add hid device: -71 [ 354.866396][T15155] usbhid: probe of 2-1:1.0 failed with error -71 14:58:53 executing program 0: 14:58:53 executing program 2: 14:58:53 executing program 3: 14:58:53 executing program 1: 14:58:53 executing program 4: [ 354.943808][T15155] usb 2-1: USB disconnect, device number 16 14:58:53 executing program 3: 14:58:53 executing program 5: 14:58:53 executing program 2: 14:58:53 executing program 4: 14:58:53 executing program 1: 14:58:53 executing program 0: 14:58:54 executing program 3: 14:58:54 executing program 0: 14:58:54 executing program 5: 14:58:54 executing program 1: 14:58:54 executing program 2: 14:58:54 executing program 4: 14:58:54 executing program 3: 14:58:54 executing program 1: 14:58:54 executing program 5: 14:58:54 executing program 0: 14:58:54 executing program 4: 14:58:54 executing program 2: 14:58:54 executing program 1: 14:58:54 executing program 5: 14:58:54 executing program 3: 14:58:54 executing program 0: 14:58:54 executing program 2: 14:58:54 executing program 4: 14:58:54 executing program 1: 14:58:54 executing program 5: 14:58:54 executing program 3: 14:58:54 executing program 2: 14:58:54 executing program 0: 14:58:54 executing program 4: 14:58:54 executing program 1: 14:58:54 executing program 5: 14:58:54 executing program 3: 14:58:54 executing program 2: 14:58:54 executing program 0: 14:58:54 executing program 4: 14:58:54 executing program 1: 14:58:54 executing program 3: 14:58:54 executing program 5: 14:58:55 executing program 2: 14:58:55 executing program 0: 14:58:55 executing program 4: 14:58:55 executing program 1: 14:58:55 executing program 5: 14:58:55 executing program 0: 14:58:55 executing program 3: 14:58:55 executing program 2: 14:58:55 executing program 4: 14:58:55 executing program 0: 14:58:55 executing program 1: 14:58:55 executing program 5: 14:58:55 executing program 2: 14:58:55 executing program 3: 14:58:55 executing program 1: 14:58:55 executing program 5: 14:58:55 executing program 4: 14:58:55 executing program 2: 14:58:55 executing program 0: 14:58:55 executing program 3: 14:58:55 executing program 1: 14:58:55 executing program 5: 14:58:55 executing program 0: 14:58:55 executing program 2: 14:58:55 executing program 4: 14:58:55 executing program 3: 14:58:55 executing program 5: 14:58:55 executing program 2: 14:58:55 executing program 1: 14:58:55 executing program 0: 14:58:55 executing program 4: 14:58:56 executing program 2: 14:58:56 executing program 1: 14:58:56 executing program 4: 14:58:56 executing program 1: 14:58:56 executing program 5: 14:58:56 executing program 0: 14:58:56 executing program 3: 14:58:56 executing program 2: 14:58:56 executing program 0: 14:58:56 executing program 2: 14:58:56 executing program 4: 14:58:56 executing program 5: 14:58:56 executing program 3: 14:58:56 executing program 1: 14:58:56 executing program 1: 14:58:56 executing program 4: 14:58:56 executing program 0: 14:58:56 executing program 5: 14:58:56 executing program 3: 14:58:56 executing program 2: 14:58:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xb}, 0x40) 14:58:56 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1c0, 0x0) 14:58:56 executing program 4: 14:58:56 executing program 0: 14:58:56 executing program 5: 14:58:56 executing program 3 (fault-call:0 fault-nth:0): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:58:56 executing program 1: io_setup(0x81, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000077c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x0, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000000), 0x1f) move_pages(0x0, 0x10, &(0x7f0000000040), &(0x7f0000000080)=[0x1], &(0x7f0000000100)=[0x0, 0x0], 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000140)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, {0x306}, 0x4, {0x2, 0x4e24, @private=0xa010102}, 'bond_slave_0\x00'}) 14:58:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x1a1041, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000000005) r4 = syz_open_procfs(r1, &(0x7f0000000080)='cgroup\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x84002, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25020000002400078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="ba562f93", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0c000800ffffffff0000000008000100000000000c00030065050000000000000c00080006000000000000000c0006000100000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20024040}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000002c0)={0x2, 0x7f}, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 14:58:56 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 14:58:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003a1eb4ffc220bb9749d3f62ff6e75bf627b972c45ff4e966cf6396326f8fd740e12d30f632ea4021262f3bce9cdb959442984ec6aae87849dff9dee8922972ad60c16d8e56b7037fd83d460588f540777acb01bbb9a4dd1cc427231d0291ad4fd17530e06c91524866c2d32c6d5b8ec1bc6e1980c9790c6b89ce08e80684010600000000170000004b3ce188c397838153bdcae60ad22d2515000000000800", @ANYRES16=r6, @ANYBLOB="0103000000000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r6, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x200000f0}, 0x4000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x8) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x20) ftruncate(r7, 0x200004) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000400)={0x0, 0x1, 0x8, 0x4}) sendfile(r0, r7, 0x0, 0x80001d00c0d0) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r8, 0x0) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000040)) 14:58:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e4000000290100090000008002000000030000000000000001000000010000008007002e2f66696c65300004000000050000000000000001000000010000002007002e2f66696c65300003000000050000000000000000000000000000000307002e2f66696c6530080100000000000000000000007c0f000000000000520748000000696c65300803000000000000000000000900000000000000000907002e2f66696c65300402000000060094250000000001000000000000000007002e2f66a723d9150000000000040000000000000207ea2d2f66696c6530"], 0xe4) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) write$P9_RREAD(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0db30e05bf3eba01c10000e13f479e5e743d6fcf57c86be4d5d5d782ab1c6cefbe554d40e10819d0f319f705007669952058df5b93fbc3e774220474bdbd8262bd2fd530fe01cfeddfc0f0fee6150e4bca0843dd4ad570c7daf748eeffa6934171daf5bf575ccd2a5d52ad209ee0948289ad029f2b13da2d157a91f78a77c14c28b22edd8a110f0a4a01dd51c587acb13b58fdb91a44ccbc3147a2364cd43b6fcf3a44ab699ca662f83184bd90682f0c7f1b84d863852f8eac"], 0xd) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x15, &(0x7f00000000c0)) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="230000003701000167000000000000000400000000000000", @ANYRES32=r2, @ANYBLOB="050000035c0200"], 0x23) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x408}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x39f98000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000380)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 358.117072][T16785] FAULT_INJECTION: forcing a failure. [ 358.117072][T16785] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 358.148634][T16789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.185477][T16785] CPU: 1 PID: 16785 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 358.194305][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.204392][T16785] Call Trace: [ 358.207716][T16785] dump_stack+0x107/0x163 [ 358.212057][T16785] should_fail.cold+0x5/0xa [ 358.216596][T16785] _copy_from_user+0x2c/0x180 [ 358.222502][T16785] __do_compat_sys_socketcall+0x12d/0x660 [ 358.228275][T16785] ? wait_for_completion+0x260/0x260 [ 358.233659][T16785] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 358.239037][T16785] ? vfs_write+0x18e/0xa30 [ 358.243462][T16785] ? fput_many+0x2f/0x1a0 [ 358.247888][T16785] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 358.254505][T16785] __do_fast_syscall_32+0x56/0x80 [ 358.259539][T16785] do_fast_syscall_32+0x2f/0x70 [ 358.264472][T16785] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 358.270807][T16785] RIP: 0023:0xf7ff1549 [ 358.274902][T16785] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 358.294865][T16785] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 358.303302][T16785] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 358.311429][T16785] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 358.319429][T16785] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 358.327701][T16785] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.336155][T16785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:58:57 executing program 1: [ 358.491559][T15978] usb 1-1: new high-speed USB device number 15 using dummy_hcd 14:58:57 executing program 1: 14:58:57 executing program 1: [ 358.679917][T15978] usb 1-1: device descriptor read/64, error 18 14:58:57 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 14:58:57 executing program 1: [ 358.858614][T16803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:58:57 executing program 3 (fault-call:0 fault-nth:1): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:58:57 executing program 1: [ 358.980220][T15978] usb 1-1: new high-speed USB device number 16 using dummy_hcd 14:58:57 executing program 4: [ 359.097583][T16811] FAULT_INJECTION: forcing a failure. [ 359.097583][T16811] name failslab, interval 1, probability 0, space 0, times 1 [ 359.155218][T16811] CPU: 1 PID: 16811 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 359.164028][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.177141][T16811] Call Trace: [ 359.179824][T15978] usb 1-1: device descriptor read/64, error 18 [ 359.180459][T16811] dump_stack+0x107/0x163 [ 359.180490][T16811] should_fail.cold+0x5/0xa [ 359.195456][T16811] ? sock_alloc_inode+0x18/0x1c0 [ 359.200409][T16811] ? sock_alloc_inode+0x18/0x1c0 [ 359.205366][T16811] should_failslab+0x5/0x10 [ 359.209904][T16811] kmem_cache_alloc+0x33b/0x460 [ 359.214791][T16811] ? sock_free_inode+0x20/0x20 [ 359.219564][T16811] sock_alloc_inode+0x18/0x1c0 [ 359.224337][T16811] ? sock_free_inode+0x20/0x20 [ 359.229110][T16811] alloc_inode+0x61/0x230 [ 359.233549][T16811] new_inode_pseudo+0x14/0xe0 [ 359.238238][T16811] sock_alloc+0x3c/0x260 [ 359.242501][T16811] __sock_create+0xb9/0x780 [ 359.247064][T16811] __sys_socket+0xef/0x200 [ 359.251496][T16811] ? move_addr_to_kernel+0x70/0x70 [ 359.256641][T16811] __do_compat_sys_socketcall+0x5dd/0x660 [ 359.262569][T16811] ? wait_for_completion+0x260/0x260 [ 359.267894][T16811] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 359.273303][T16811] ? vfs_write+0x18e/0xa30 [ 359.277732][T16811] ? fput_many+0x2f/0x1a0 [ 359.282090][T16811] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 359.288693][T16811] __do_fast_syscall_32+0x56/0x80 [ 359.293729][T16811] do_fast_syscall_32+0x2f/0x70 [ 359.298600][T16811] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 359.304937][T16811] RIP: 0023:0xf7ff1549 [ 359.309014][T16811] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 359.319932][T15978] usb usb1-port1: attempt power cycle [ 359.328626][T16811] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 359.328647][T16811] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 359.328657][T16811] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 359.328676][T16811] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 359.366634][T16811] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.375077][T16811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.490161][T16811] socket: no more sockets [ 360.109899][T15978] usb 1-1: new high-speed USB device number 17 using dummy_hcd 14:58:59 executing program 5: 14:58:59 executing program 4: 14:58:59 executing program 1: [ 360.300152][T15978] usb 1-1: device descriptor read/8, error -61 [ 360.570423][T15978] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 360.744187][T15978] usb 1-1: device descriptor read/8, error -61 [ 360.871636][T15978] usb usb1-port1: unable to enumerate USB device 14:58:59 executing program 0: 14:58:59 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 14:58:59 executing program 3 (fault-call:0 fault-nth:2): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:58:59 executing program 1: 14:58:59 executing program 4: 14:58:59 executing program 5: 14:59:00 executing program 5: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, 0x0) 14:59:00 executing program 1: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup(r0, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) [ 361.208512][T16837] FAULT_INJECTION: forcing a failure. [ 361.208512][T16837] name failslab, interval 1, probability 0, space 0, times 0 [ 361.233361][T16838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.275079][T16837] CPU: 1 PID: 16837 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 361.283916][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.294074][T16837] Call Trace: [ 361.297390][T16837] dump_stack+0x107/0x163 [ 361.301747][T16837] should_fail.cold+0x5/0xa [ 361.306280][T16837] ? security_inode_alloc+0x34/0x160 [ 361.311583][T16837] ? security_inode_alloc+0x34/0x160 [ 361.316890][T16837] should_failslab+0x5/0x10 [ 361.321458][T16837] kmem_cache_alloc+0x33b/0x460 [ 361.326339][T16837] security_inode_alloc+0x34/0x160 [ 361.331496][T16837] inode_init_always+0x5a9/0xdb0 [ 361.336457][T16837] ? __init_waitqueue_head+0x97/0x110 [ 361.341872][T16837] alloc_inode+0x82/0x230 [ 361.346249][T16837] new_inode_pseudo+0x14/0xe0 [ 361.350947][T16837] sock_alloc+0x3c/0x260 [ 361.355210][T16837] __sock_create+0xb9/0x780 [ 361.359740][T16837] __sys_socket+0xef/0x200 [ 361.364189][T16837] ? move_addr_to_kernel+0x70/0x70 [ 361.369345][T16837] __do_compat_sys_socketcall+0x5dd/0x660 14:59:00 executing program 4: epoll_create(0x7f) [ 361.375089][T16837] ? wait_for_completion+0x260/0x260 [ 361.380394][T16837] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 361.385791][T16837] ? vfs_write+0x18e/0xa30 [ 361.390246][T16837] ? fput_many+0x2f/0x1a0 [ 361.394617][T16837] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 361.401240][T16837] __do_fast_syscall_32+0x56/0x80 [ 361.406283][T16837] do_fast_syscall_32+0x2f/0x70 [ 361.411151][T16837] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 361.417487][T16837] RIP: 0023:0xf7ff1549 [ 361.421569][T16837] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.441203][T16837] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 361.449629][T16837] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 361.457626][T16837] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 361.465604][T16837] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 14:59:00 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 361.473590][T16837] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 361.481572][T16837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:00 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 14:59:00 executing program 5: io_setup(0x0, &(0x7f00000000c0)=0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 14:59:00 executing program 1: pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 14:59:00 executing program 2: timer_create(0x3, &(0x7f00000005c0)={0x0, 0x3b}, &(0x7f0000000600)) [ 361.777200][T16837] socket: no more sockets 14:59:00 executing program 3 (fault-call:0 fault-nth:3): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:00 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x4c000, 0x0) 14:59:00 executing program 1: pipe2(0x0, 0x44000) 14:59:00 executing program 0: r0 = geteuid() setresuid(r0, 0xffffffffffffffff, 0xee01) 14:59:00 executing program 2: add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:59:00 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) 14:59:01 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) openat$cgroup_type(r0, &(0x7f0000000a80)='cgroup.type\x00', 0x2, 0x0) 14:59:01 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 14:59:01 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)='devices.deny\x00', 0x2, 0x0) 14:59:01 executing program 1: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x180000) 14:59:01 executing program 4: inotify_init1(0x40800) [ 362.250538][T16877] FAULT_INJECTION: forcing a failure. [ 362.250538][T16877] name failslab, interval 1, probability 0, space 0, times 0 [ 362.309542][T16877] CPU: 0 PID: 16877 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 362.318351][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.328419][T16877] Call Trace: [ 362.331733][T16877] dump_stack+0x107/0x163 [ 362.336085][T16877] should_fail.cold+0x5/0xa [ 362.340614][T16877] ? sk_prot_alloc+0x17a/0x300 [ 362.345393][T16877] should_failslab+0x5/0x10 [ 362.349930][T16877] __kmalloc+0x2e1/0x3f0 [ 362.354227][T16877] sk_prot_alloc+0x17a/0x300 [ 362.358873][T16877] sk_alloc+0x32/0xbd0 [ 362.362967][T16877] __netlink_create+0x63/0x340 [ 362.367769][T16877] netlink_create+0x3a1/0x5d0 [ 362.373007][T16877] __sock_create+0x3de/0x780 [ 362.377632][T16877] __sys_socket+0xef/0x200 [ 362.382074][T16877] ? move_addr_to_kernel+0x70/0x70 [ 362.387216][T16877] __do_compat_sys_socketcall+0x5dd/0x660 [ 362.392963][T16877] ? wait_for_completion+0x260/0x260 [ 362.398273][T16877] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 362.403667][T16877] ? vfs_write+0x18e/0xa30 [ 362.408106][T16877] ? fput_many+0x2f/0x1a0 [ 362.412472][T16877] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 362.419089][T16877] __do_fast_syscall_32+0x56/0x80 [ 362.424142][T16877] do_fast_syscall_32+0x2f/0x70 [ 362.429016][T16877] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 362.435355][T16877] RIP: 0023:0xf7ff1549 [ 362.439440][T16877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 14:59:01 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) [ 362.459063][T16877] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 362.467502][T16877] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 362.475493][T16877] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 362.483477][T16877] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 362.491461][T16877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.499446][T16877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:01 executing program 3 (fault-call:0 fault-nth:4): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:01 executing program 1: stat(&(0x7f0000000180)='./file0\x00', 0x0) 14:59:01 executing program 5: unshare(0x60800) 14:59:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) 14:59:01 executing program 0: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, 0x0) 14:59:01 executing program 4: pipe(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 14:59:01 executing program 1: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) 14:59:01 executing program 5: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 14:59:01 executing program 2: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 14:59:01 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 14:59:01 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.mems\x00', 0x2, 0x0) [ 363.022503][T16910] FAULT_INJECTION: forcing a failure. [ 363.022503][T16910] name failslab, interval 1, probability 0, space 0, times 0 [ 363.064326][T16910] CPU: 1 PID: 16910 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 363.073145][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.083214][T16910] Call Trace: [ 363.086524][T16910] dump_stack+0x107/0x163 [ 363.090899][T16910] should_fail.cold+0x5/0xa [ 363.095453][T16910] ? apparmor_sk_alloc_security+0x79/0x100 [ 363.101470][T16910] should_failslab+0x5/0x10 [ 363.106029][T16910] kmem_cache_alloc_trace+0x2c7/0x380 [ 363.111543][T16910] apparmor_sk_alloc_security+0x79/0x100 [ 363.117204][T16910] security_sk_alloc+0x50/0xb0 [ 363.122095][T16910] sk_prot_alloc+0x24a/0x300 [ 363.126844][T16910] sk_alloc+0x32/0xbd0 [ 363.131060][T16910] __netlink_create+0x63/0x340 [ 363.135847][T16910] netlink_create+0x3a1/0x5d0 [ 363.140562][T16910] __sock_create+0x3de/0x780 [ 363.145183][T16910] __sys_socket+0xef/0x200 [ 363.149652][T16910] ? move_addr_to_kernel+0x70/0x70 [ 363.156480][T16910] __do_compat_sys_socketcall+0x5dd/0x660 [ 363.162227][T16910] ? wait_for_completion+0x260/0x260 [ 363.167564][T16910] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 363.172996][T16910] ? vfs_write+0x18e/0xa30 [ 363.177552][T16910] ? fput_many+0x2f/0x1a0 [ 363.181920][T16910] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 363.188546][T16910] __do_fast_syscall_32+0x56/0x80 [ 363.193608][T16910] do_fast_syscall_32+0x2f/0x70 [ 363.199274][T16910] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 363.205657][T16910] RIP: 0023:0xf7ff1549 [ 363.209757][T16910] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.229389][T16910] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 363.238029][T16910] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 363.246025][T16910] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 363.254031][T16910] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 14:59:02 executing program 5: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 363.262143][T16910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.270250][T16910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:02 executing program 3 (fault-call:0 fault-nth:5): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:02 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)={0x0}) 14:59:02 executing program 5: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 14:59:02 executing program 2: pipe2$9p(&(0x7f0000005c40), 0x80000) 14:59:02 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:59:02 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 14:59:02 executing program 4: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280)) 14:59:02 executing program 5: 14:59:02 executing program 2: 14:59:02 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x20a00, 0x0) 14:59:02 executing program 1: pipe2$9p(0x0, 0x5800) [ 363.969138][T16942] FAULT_INJECTION: forcing a failure. [ 363.969138][T16942] name failslab, interval 1, probability 0, space 0, times 0 [ 364.032284][T16942] CPU: 0 PID: 16942 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 364.042321][T16942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.052503][T16942] Call Trace: [ 364.055820][T16942] dump_stack+0x107/0x163 [ 364.060174][T16942] should_fail.cold+0x5/0xa [ 364.064700][T16942] ? __d_alloc+0x2a/0x950 [ 364.069050][T16942] ? __d_alloc+0x2a/0x950 [ 364.073410][T16942] should_failslab+0x5/0x10 [ 364.077930][T16942] kmem_cache_alloc+0x33b/0x460 [ 364.083179][T16942] __d_alloc+0x2a/0x950 [ 364.087358][T16942] ? __alloc_fd+0x28d/0x600 [ 364.091918][T16942] d_alloc_pseudo+0x19/0x70 [ 364.096446][T16942] alloc_file_pseudo+0xc6/0x250 [ 364.101343][T16942] ? alloc_file+0x5a0/0x5a0 [ 364.105875][T16942] ? do_raw_spin_unlock+0x171/0x230 [ 364.111216][T16942] ? _raw_spin_unlock+0x24/0x40 [ 364.116083][T16942] ? __alloc_fd+0x28d/0x600 [ 364.120643][T16942] sock_alloc_file+0x4f/0x190 [ 364.125352][T16942] __sys_socket+0x13d/0x200 [ 364.130006][T16942] ? move_addr_to_kernel+0x70/0x70 [ 364.135248][T16942] __do_compat_sys_socketcall+0x5dd/0x660 [ 364.140991][T16942] ? wait_for_completion+0x260/0x260 [ 364.146303][T16942] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 364.151699][T16942] ? vfs_write+0x18e/0xa30 [ 364.156141][T16942] ? fput_many+0x2f/0x1a0 [ 364.160517][T16942] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 364.167129][T16942] __do_fast_syscall_32+0x56/0x80 [ 364.172178][T16942] do_fast_syscall_32+0x2f/0x70 [ 364.177058][T16942] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 364.183409][T16942] RIP: 0023:0xf7ff1549 [ 364.187509][T16942] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 364.207161][T16942] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 364.216333][T16942] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 364.224327][T16942] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 14:59:02 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 364.232321][T16942] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 364.240339][T16942] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 364.248589][T16942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:03 executing program 3 (fault-call:0 fault-nth:6): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:03 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x1000) 14:59:03 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') 14:59:03 executing program 1: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 14:59:03 executing program 4: r0 = socket(0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 14:59:03 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x1) 14:59:03 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) 14:59:03 executing program 1: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 14:59:03 executing program 2: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 14:59:03 executing program 4: pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 14:59:03 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000009c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) [ 364.870533][T16976] FAULT_INJECTION: forcing a failure. [ 364.870533][T16976] name failslab, interval 1, probability 0, space 0, times 0 [ 364.905014][T16976] CPU: 1 PID: 16976 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 364.913825][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.923910][T16976] Call Trace: [ 364.927316][T16976] dump_stack+0x107/0x163 [ 364.931678][T16976] should_fail.cold+0x5/0xa [ 364.936208][T16976] ? __alloc_file+0x21/0x350 [ 364.940844][T16976] ? __alloc_file+0x21/0x350 [ 364.945476][T16976] should_failslab+0x5/0x10 [ 364.950130][T16976] kmem_cache_alloc+0x33b/0x460 [ 364.955041][T16976] __alloc_file+0x21/0x350 [ 364.959518][T16976] alloc_empty_file+0x6d/0x170 [ 364.964747][T16976] alloc_file+0x5e/0x5a0 14:59:03 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x40, 0x0) [ 364.969029][T16976] alloc_file_pseudo+0x165/0x250 [ 364.973991][T16976] ? alloc_file+0x5a0/0x5a0 [ 364.978517][T16976] ? do_raw_spin_unlock+0x171/0x230 [ 364.983747][T16976] ? _raw_spin_unlock+0x24/0x40 [ 364.988650][T16976] ? __alloc_fd+0x28d/0x600 [ 364.993187][T16976] sock_alloc_file+0x4f/0x190 [ 364.997900][T16976] __sys_socket+0x13d/0x200 [ 365.004946][T16976] ? move_addr_to_kernel+0x70/0x70 [ 365.010088][T16976] __do_compat_sys_socketcall+0x5dd/0x660 [ 365.015848][T16976] ? wait_for_completion+0x260/0x260 [ 365.021152][T16976] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 365.026548][T16976] ? vfs_write+0x18e/0xa30 [ 365.030995][T16976] ? fput_many+0x2f/0x1a0 [ 365.035431][T16976] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 365.042044][T16976] __do_fast_syscall_32+0x56/0x80 [ 365.047090][T16976] do_fast_syscall_32+0x2f/0x70 [ 365.051961][T16976] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 365.058305][T16976] RIP: 0023:0xf7ff1549 [ 365.062403][T16976] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 365.082038][T16976] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 365.090558][T16976] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 [ 365.098551][T16976] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 365.106530][T16976] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 365.114509][T16976] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.122492][T16976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:04 executing program 3 (fault-call:0 fault-nth:7): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:04 executing program 1: r0 = getgid() setregid(r0, 0xee00) 14:59:04 executing program 0: pselect6(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000340), &(0x7f00000003c0)={0x0}) 14:59:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000001c0)={0x14, 0x36, 0x935b04673fa1e993, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 14:59:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0x2c}}, 0x0) 14:59:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000000140)={0x24, 0x2e, 0x935b04673fa1e993, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x24}], 0x1}, 0x0) 14:59:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') read$FUSE(r0, 0x0, 0x0) 14:59:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_dump={0x3e}}) [ 365.699277][T17012] FAULT_INJECTION: forcing a failure. [ 365.699277][T17012] name failslab, interval 1, probability 0, space 0, times 0 [ 365.751982][T17012] CPU: 1 PID: 17012 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 365.760792][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.770885][T17012] Call Trace: [ 365.774202][T17012] dump_stack+0x107/0x163 [ 365.778555][T17012] should_fail.cold+0x5/0xa [ 365.783078][T17012] ? security_file_alloc+0x34/0x170 [ 365.789130][T17012] ? security_file_alloc+0x34/0x170 [ 365.794351][T17012] should_failslab+0x5/0x10 [ 365.799044][T17012] kmem_cache_alloc+0x33b/0x460 [ 365.803923][T17012] security_file_alloc+0x34/0x170 [ 365.809412][T17012] __alloc_file+0xd8/0x350 [ 365.813859][T17012] alloc_empty_file+0x6d/0x170 [ 365.818674][T17012] alloc_file+0x5e/0x5a0 [ 365.822954][T17012] alloc_file_pseudo+0x165/0x250 [ 365.827923][T17012] ? alloc_file+0x5a0/0x5a0 [ 365.832452][T17012] ? do_raw_spin_unlock+0x171/0x230 [ 365.837682][T17012] ? _raw_spin_unlock+0x24/0x40 [ 365.842572][T17012] ? __alloc_fd+0x28d/0x600 [ 365.847111][T17012] sock_alloc_file+0x4f/0x190 [ 365.851854][T17012] __sys_socket+0x13d/0x200 [ 365.856377][T17012] ? move_addr_to_kernel+0x70/0x70 [ 365.861523][T17012] __do_compat_sys_socketcall+0x5dd/0x660 [ 365.867382][T17012] ? wait_for_completion+0x260/0x260 [ 365.872695][T17012] ? bpf_sk_storage_clone+0x6c0/0x6c0 [ 365.878132][T17012] ? vfs_write+0x18e/0xa30 [ 365.883004][T17012] ? fput_many+0x2f/0x1a0 [ 365.887365][T17012] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 365.893978][T17012] __do_fast_syscall_32+0x56/0x80 14:59:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000140)="9919", 0x2}], 0x1}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) 14:59:04 executing program 4: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) 14:59:04 executing program 5: io_submit(0x0, 0x0, &(0x7f0000000ac0)) [ 365.899020][T17012] do_fast_syscall_32+0x2f/0x70 [ 365.903885][T17012] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 365.910217][T17012] RIP: 0023:0xf7ff1549 [ 365.914305][T17012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 365.934475][T17012] RSP: 002b:00000000f55ea030 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 365.942916][T17012] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f55ea044 14:59:04 executing program 2: [ 365.950912][T17012] RDX: 000000000811e79c RSI: 000000000000002e RDI: 0000000020000300 [ 365.958905][T17012] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 365.967062][T17012] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.975136][T17012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:59:05 executing program 3 (fault-call:0 fault-nth:8): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:05 executing program 4: 14:59:05 executing program 1: 14:59:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000000180)={0x14, 0x26, 0x935b04673fa1e993, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 14:59:05 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:05 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x6, @empty, 0x0, 0x0, 'lblcr\x00'}, {@local}}, 0x44) 14:59:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000001dc0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}}, {{&(0x7f0000000000)=@in, 0x80, 0x0}}], 0x2, 0x0) 14:59:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast1}, @nfc, @l2={0x1f, 0x0, @fixed}}) 14:59:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000000000)={0x24, 0x2a, 0x935b04673fa1e993, 0x0, 0x0, "", [@generic="feae19c5877c7d318a247491902112d57d"]}, 0x24}], 0x1}, 0x0) 14:59:05 executing program 5: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c03, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "408b0301dcb8a402cc02a52532785aec11a63f6832927e2a8932b66ca63aa002e00751470e814ab516c15286fd2042040000000200", "b8f1b4fa00000000b7f405d53b1b4549a3fcb55be159afa1c02188b895618eab"}) [ 366.591669][T17039] FAULT_INJECTION: forcing a failure. [ 366.591669][T17039] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 366.654631][T17039] CPU: 0 PID: 17039 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 366.663448][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.673522][T17039] Call Trace: [ 366.676844][T17039] dump_stack+0x107/0x163 [ 366.681197][T17039] should_fail.cold+0x5/0xa [ 366.685727][T17039] __alloc_pages_nodemask+0x189/0x730 [ 366.691128][T17039] ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510 [ 366.697937][T17039] ? find_held_lock+0x2d/0x110 [ 366.702727][T17039] ? count_memcg_event_mm.part.0+0x151/0x280 [ 366.708731][T17039] ? lock_downgrade+0x6d0/0x6d0 [ 366.713600][T17039] ? mark_held_locks+0x9f/0xe0 [ 366.718391][T17039] alloc_pages_vma+0xdd/0x730 [ 366.723128][T17039] handle_mm_fault+0x2441/0x55d0 [ 366.728101][T17039] ? vm_iomap_memory+0x190/0x190 [ 366.733088][T17039] do_user_addr_fault+0x55b/0xb40 [ 366.738185][T17039] exc_page_fault+0x9e/0x180 [ 366.742806][T17039] ? asm_exc_page_fault+0x8/0x30 [ 366.747796][T17039] asm_exc_page_fault+0x1e/0x30 [ 366.752933][T17039] RIP: 0023:0x804a8a0 [ 366.756933][T17039] Code: 00 00 c7 80 24 10 00 00 00 00 00 00 c1 e9 02 31 c0 f3 ab 8d 43 38 55 83 c5 03 66 89 73 2e 66 89 53 2c 83 e5 fc ff 74 24 28 50 0b 6c 02 00 8d 44 2b 38 89 03 83 c4 1c 5b 5e 5f 5d c3 8d b6 00 [ 366.776670][T17039] RSP: 002b:00000000f55ea000 EFLAGS: 00010202 [ 366.782795][T17039] RAX: 00000000f55ea0cc RBX: 00000000f55ea094 RCX: 0000000000000000 [ 366.790783][T17039] RDX: 0000000000000010 RSI: 0000000000000005 RDI: 00000000f55eb0bc 14:59:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000240)={@empty={[0x0, 0x0, 0x0, 0x2]}, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0xb}) [ 366.798773][T17039] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 366.806766][T17039] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 366.814755][T17039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.017943][T17039] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 367.032472][T17039] CPU: 1 PID: 17039 Comm: syz-executor.3 Not tainted 5.10.0-rc4-syzkaller #0 [ 367.041277][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.051347][T17039] Call Trace: [ 367.054652][T17039] dump_stack+0x107/0x163 [ 367.059019][T17039] dump_header+0x106/0x624 [ 367.063459][T17039] oom_kill_process.cold+0x10/0x15 [ 367.068600][T17039] out_of_memory+0x358/0x13f0 [ 367.073304][T17039] ? oom_killer_disable+0x270/0x270 [ 367.078540][T17039] ? mutex_trylock+0x246/0x2c0 [ 367.083328][T17039] ? pagefault_out_of_memory+0xde/0x110 [ 367.088889][T17039] pagefault_out_of_memory+0xfa/0x110 [ 367.094274][T17039] ? out_of_memory+0x13f0/0x13f0 [ 367.099237][T17039] mm_fault_error+0x123/0x380 [ 367.103931][T17039] do_user_addr_fault+0x5bb/0xb40 [ 367.108982][T17039] exc_page_fault+0x9e/0x180 [ 367.113583][T17039] ? asm_exc_page_fault+0x8/0x30 [ 367.118534][T17039] asm_exc_page_fault+0x1e/0x30 [ 367.123393][T17039] RIP: 0023:0x804a8a0 [ 367.127391][T17039] Code: 00 00 c7 80 24 10 00 00 00 00 00 00 c1 e9 02 31 c0 f3 ab 8d 43 38 55 83 c5 03 66 89 73 2e 66 89 53 2c 83 e5 fc ff 74 24 28 50 0b 6c 02 00 8d 44 2b 38 89 03 83 c4 1c 5b 5e 5f 5d c3 8d b6 00 [ 367.147007][T17039] RSP: 002b:00000000f55ea000 EFLAGS: 00010202 [ 367.154309][T17039] RAX: 00000000f55ea0cc RBX: 00000000f55ea094 RCX: 0000000000000000 [ 367.162300][T17039] RDX: 0000000000000010 RSI: 0000000000000005 RDI: 00000000f55eb0bc [ 367.170281][T17039] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 367.178260][T17039] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 367.186401][T17039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.211073][T17039] Mem-Info: [ 367.214516][T17039] active_anon:282 inactive_anon:112295 isolated_anon:0 [ 367.214516][T17039] active_file:6058 inactive_file:41629 isolated_file:0 [ 367.214516][T17039] unevictable:0 dirty:53 writeback:0 [ 367.214516][T17039] slab_reclaimable:18635 slab_unreclaimable:97878 [ 367.214516][T17039] mapped:60663 shmem:5082 pagetables:1305 bounce:0 [ 367.214516][T17039] free:1332803 free_pcp:252 free_cma:0 [ 367.267294][T17039] Node 0 active_anon:1128kB inactive_anon:449280kB active_file:24096kB inactive_file:166516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242652kB dirty:212kB writeback:0kB shmem:20328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 382976kB writeback_tmp:0kB kernel_stack:8928kB all_unreclaimable? no [ 367.307073][T17039] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no [ 367.350389][T17039] Node 0 DMA free:15908kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.388006][T17039] lowmem_reserve[]: 0 2661 2661 2661 2661 [ 367.394871][T17039] Node 0 DMA32 free:1297840kB min:35748kB low:44684kB high:53620kB reserved_highatomic:0KB active_anon:1124kB inactive_anon:449480kB active_file:23968kB inactive_file:166452kB unevictable:0kB writepending:212kB present:3129332kB managed:2730584kB mlocked:0kB pagetables:5216kB bounce:0kB free_pcp:628kB local_pcp:384kB free_cma:0kB [ 367.446447][T17039] lowmem_reserve[]: 0 0 0 0 0 [ 367.466821][T17039] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:128kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:196kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.494926][T17039] lowmem_reserve[]: 0 0 0 0 0 [ 367.500880][T17039] Node 1 Normal free:4017464kB min:54148kB low:67684kB high:81220kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128264kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.531595][T17039] lowmem_reserve[]: 0 0 0 0 0 [ 367.536472][T17039] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 367.552834][T17039] Node 0 DMA32: 1868*4kB (UM) 3127*8kB (UME) 1770*16kB (UME) 337*32kB (UME) 210*64kB (UME) 132*128kB (UME) 63*256kB (UM) 16*512kB (UM) 10*1024kB (UM) 1*2048kB (M) 283*4096kB (UM) = 1297704kB [ 367.575992][T17039] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.588964][T17039] Node 1 Normal: 168*4kB (UME) 33*8kB (UE) 13*16kB (UE) 208*32kB (UE) 69*64kB (UE) 23*128kB (UE) 8*256kB (U) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 975*4096kB (M) = 4017464kB [ 367.607525][T17039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.618926][T17039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.629058][T17039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.639217][T17039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 367.649240][T17039] 52385 total pagecache pages [ 367.654661][T17039] 0 pages in swap cache [ 367.658815][T17039] Swap cache stats: add 0, delete 0, find 0/0 [ 367.665972][T17039] Free swap = 0kB [ 367.670349][T17039] Total swap = 0kB [ 367.674080][T17039] 2097051 pages RAM [ 367.677867][T17039] 0 pages HighMem/MovableOnly [ 367.686284][T17039] 378313 pages reserved [ 367.691340][T17039] 0 pages cma reserved [ 367.695418][T17039] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=12807,uid=0 14:59:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:06 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name, 0x10) 14:59:06 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:59:06 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0x6a}}) 14:59:06 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x94) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x11, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x11f08) finit_module(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00', 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x8, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb8, 0xa, 0xd0e0000, 0x1b8, 0x100, 0x1b8, 0x1d8, 0x1d8, 0x1b8, 0x1d8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gre0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'rose0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33], 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 14:59:06 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) [ 367.712574][T17039] Out of memory: Killed process 12807 (syz-executor.4) total-vm:93328kB, anon-rss:3928kB, file-rss:35756kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 367.733983][ T1655] oom_reaper: reaped process 12807 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 14:59:06 executing program 1: prctl$PR_GET_TID_ADDRESS(0x21, 0x0) [ 367.835943][T17073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:06 executing program 5: syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x3c) 14:59:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 14:59:06 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 14:59:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000240)="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", &(0x7f0000001240)=""/4096, 0x0, &(0x7f0000002340)="c359463b86330bead54154afc3bcf19252055fe83fcb9c1a0f9892cc3d2c43bf233b7e7d7da73e24124f2424189c4e4b011b39ee56882dac9b0f84ab17e24d0055ccbca17aa537dc692038318a4115159fc2bec42ec9844ef5da81762068489b3f2a11928092057be7eed2d9d77732cec6c71e326bf37e7110d9f11f3b31efe2cd848dcbe9aca75515a134020562d58869e437122099113372f627057c57e73877d397f2d06f816019ae7676ab78aa2c2b9bdb5374ff5ef2ea8dc282ad6d702e20c845659353e1ed93306fdda7f33d51b205", 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="02", 0x1}) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @loopback}, 0x10) 14:59:06 executing program 1: socket(0x22, 0x0, 0x80) 14:59:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:07 executing program 4: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1}]) 14:59:07 executing program 5: clock_gettime(0x5, &(0x7f0000000200)) 14:59:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340), &(0x7f0000000380)=0x8) 14:59:07 executing program 1: getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) 14:59:07 executing program 0: io_setup(0x2, &(0x7f0000000000)=0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001980)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 14:59:07 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x0, 0x0) [ 368.334449][T17111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005600000826bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="95"], 0x58}}, 0x0) 14:59:07 executing program 5: r0 = memfd_create(&(0x7f00000003c0)='\xedr!QY\x88=Vx\xa1\xd9<\xdeb\x17\xd3\xe2i\x1d\x17\x17\xa4\x00\xd8\x02\x9f\xa8\x00\x00\x00]\f\xcbo\xc4X\x00\x94\x81\x96h\xef~Ms\"\x00\x00hu\x9c\xccC\x9c\xab\xb4!\xe6\xd9\x13\xca9\x03L\xa6\xa3\xe1\xb4\x16\xca\x81=\x8c\xcb\xbf\x90~]\x8ff\xaa\xe0\xf2\x91w\xda\x91\x12g\x8c\xf78\x8dj\x97]\xd9\'\xdf\x9fy\xf7\xdf\x14\x80\xc3ggM\x7f}\x86\xb0[I\xd8\x16c\xac\x9f\x116|\x91\xf9\t\x88\xfe\xe2\xdf\xf9\x04O=x\xc5\xe3\xfd\xb4\x97,\xf1\x97\x88\xf7\xc8w<\x9a\x15\x11\x1a\xe7OjR\xdd\x92p\xcc\xdd\xee\xd6\x0e\xe5\xa0Jot\x84\"\x9e\xa3\xf2\xb3\v&A(fi\xb1w\x84G\x14O\xc3_\xaa\xd5l/\x86qdA|T\xd82k\xe4\x84\x9a\'\xadg\xcc\x83\x18\xa4\xb85\x8f\xbdH8v\x8a\\\xf4\xdbr@\\\xaf\x9b+\xe0\a%\x9b\xde&\xfd\xd8\xdd\xbb\xd6N\x8f,\v\x87\xbbmI\xd9\xa5\xeb\xa7\xac\xaf\xc7\x16#\x947\'\xc2`\x86@v\xf6\x17\xba\x82\x8f\xb2\xeb\x03\x94\x12\x92\x05U\xd8\xe9gF\xfa\xb6\xa0b)LLKg\x155E\xe5X! \xd3h\x8b\xe7^\x92\xceg\xab$\xdf\x13\xb4\xa7\xfa\x06\xba\xcbu\x8eF\x9b\xda\xb4\x9e\xb8\x0e\x90\x8c\xe5% \xfe\x91x\x9a\x8d\xf6\xeb\x11\xe8\x87\xe6K\x83\x10\x87\xcf \xfe\xec\xd6m\x8dA.\xf1\x99\x1a9\xf3\x9c\xd1\x9a\xffiE\x8d\xd7N\xb5R\xd7Q}\x95d\xb5\x18$\xd5', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, 0x0) 14:59:07 executing program 4: mq_unlink(&(0x7f00000000c0)='*-,)(M*$\x00') 14:59:07 executing program 0: prctl$PR_GET_TID_ADDRESS(0xf, &(0x7f0000000040)) 14:59:07 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/54, 0x36}], 0x3, &(0x7f0000001d00)=[{&(0x7f0000000840)=""/241, 0xf1}, {0x0}], 0x2, 0x0) [ 368.651722][T17111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0xc}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000000)={'veth0_to_team\x00', @ifru_names}) 14:59:07 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 14:59:07 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:59:07 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x418000, 0x0) 14:59:07 executing program 1: ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, r0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x0, 0xb, 0x0, 0x7, 0x24c20082, r4}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x74, r4}) 14:59:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 14:59:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0xd, 0xa, 0x201}, 0x14}}, 0x0) [ 368.845782][T17142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:07 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x12, r0, 0x0) 14:59:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1e8c}, 0x40) 14:59:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/234, 0xea}], 0x1) 14:59:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000002c0)=""/233, 0x26, 0xe9, 0x1}, 0x20) [ 369.188417][T17142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:08 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x95}) 14:59:08 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x20c, 0x0, 0x0, 0x0, 0x9}) 14:59:08 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/233, 0x32, 0xe9, 0x1}, 0x20) 14:59:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x48}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x3503, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 14:59:08 executing program 2: r0 = socket(0x1, 0x3, 0x0) bind$inet6(r0, 0x0, 0x0) 14:59:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb017a18"], &(0x7f00000001c0)=""/202, 0x73, 0xca, 0x1}, 0x20) 14:59:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x701}, 0x14}}, 0x0) [ 369.394000][T17172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:08 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x4, 0x0, 0x0, 0x0, @random="820a836a1221"}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[], 0x1120}, 0x0) 14:59:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:59:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@mcast1}, 0x14) 14:59:08 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f0000000040)=@l2={0x1f, 0x0, @fixed, 0x0, 0x1}, 0x80, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:59:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 14:59:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000035c0)='ethtool\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000003600)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003680)={&(0x7f00000038c0)={0xac, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffffa7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x94b647af8e8fead4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0xac}}, 0x0) [ 369.732323][T17172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x50}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 369.890128][T17192] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 14:59:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x5000}, 0x0) 14:59:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000001010107"], 0x14}}, 0x0) 14:59:08 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @local}, 0x186}) 14:59:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010800000000008000f049"], 0x14}}, 0x0) [ 369.934775][T17195] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.951877][T17196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:08 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000001200)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback=0x7f000002}}, 0x1c) 14:59:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') 14:59:09 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) syz_genetlink_get_family_id$nbd(0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) 14:59:09 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{0x0}, {0x0}], 0x2}, 0x10082) 14:59:09 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000240)={{@local, 0xd619}, 0xcecd, 0x2}) syz_genetlink_get_family_id$nbd(&(0x7f00000014c0)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) [ 370.310900][T17196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:59:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {0x0}, {0x0}, {&(0x7f0000000940)=""/71, 0x47}], 0x5, 0xc0070020, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000340)={0x1, 0x1, 0x4, 0x4b161bb1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40088c4}, 0x0) ioctl$CHAR_RAW_RAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000100)) 14:59:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x6d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:09 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001540)={0x0, 0x0, 0x8}, 0x10) [ 370.611923][T17232] new mount options do not match the existing superblock, will be ignored [ 370.623363][T17235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x80000, 0x2, &(0x7f0000001ac0)) 14:59:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:09 executing program 2: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) 14:59:09 executing program 1: socketpair(0x28, 0x0, 0x0, &(0x7f0000000300)) [ 370.689204][T17236] new mount options do not match the existing superblock, will be ignored 14:59:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xd6c2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 14:59:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:09 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000001040)=@ax25={{0x3, @null}, [@bcast, @netrom, @bcast, @bcast, @default, @bcast, @default, @netrom]}, 0x80, &(0x7f0000001240)=[{0x0}, {0x0}], 0x2}, 0x0) 14:59:09 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x3f}, 0x0, 0x0) [ 370.926436][T17235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:09 executing program 5: mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) 14:59:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x40, 0x65, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}]}, 0x40}}, 0x0) 14:59:09 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x203001, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 14:59:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:09 executing program 0: pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:59:09 executing program 4: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x0) 14:59:10 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) [ 371.198198][T17272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:10 executing program 2: select(0x40, &(0x7f0000000200), &(0x7f0000000240), 0x0, &(0x7f00000002c0)) 14:59:10 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x10641, 0x0) 14:59:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ipv6={@ipv4={[], [], @empty}, @local, [], [], 'macvlan1\x00', 'xfrm0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x9}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 14:59:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:10 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xffffffff, 0x3, 0x0, "31019ee23462d3e64180d5de1874b4202d2f943fbd0400981ac9002986578260"}) 14:59:10 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) [ 371.541600][T17272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:10 executing program 4: select(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 14:59:10 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x0, @MIDI_NOTEON=@special}) 14:59:10 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000035c0)="f30fd6de66b80a0000000f23c00f21f86635010002000f23f8660f5ed90f01cf66b93b00000066b80000010066ba000000000f30670fc72fbaf80c66b81eb0d68866efbafc0cb8e72feff30f1efe0f20e06635400000000f22e0360f2fe3", 0x5e}], 0x1, 0x51, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b99c03000066b8f3be000066ba000000000f30360f63e566b8d90000000f23c80f21f866350000e0000f23f8baf80c66b834b7428066efbafc0cedba400066b89ea7112666efba2000ec36263e0f293af4660fec1966b9800000c00f326635008000000f30", 0x66}], 0x1, 0x20, &(0x7f00000001c0)=[@dstype0={0x6, 0xa}], 0x1) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f0000000100)=""/234, 0xea}], 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) 14:59:10 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 14:59:10 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) [ 371.761609][T17293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="1d", 0x1}, {&(0x7f00000001c0)="f4", 0x1}, {&(0x7f00000002c0)="81", 0x1}], 0x3}], 0x1, 0x0) 14:59:10 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000026c0)={0x10, 0x0, r1}, 0x10) 14:59:10 executing program 2: pselect6(0x40, &(0x7f0000000340)={0x4}, &(0x7f0000000380), &(0x7f00000003c0)={0x5}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 14:59:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)) 14:59:10 executing program 5: clock_gettime(0xb, &(0x7f0000000300)) 14:59:10 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x101}, 0x0, 0x0) [ 372.096767][T17293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40001, 0x0) write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x1c) 14:59:11 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) select(0x40, &(0x7f0000000040)={0xd}, 0x0, 0x0, 0x0) [ 372.329454][T17328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.653826][T17328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mlockall(0x1) 14:59:11 executing program 5: migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffffa) 14:59:11 executing program 2: openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x80, 0x0) 14:59:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:11 executing program 0: r0 = socket(0x15, 0x5, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 14:59:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:11 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x3, 0xa0, 0x0, @generic}) [ 373.064643][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:11 executing program 2: syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) 14:59:11 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, 0x0) 14:59:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x0, 0x0, 0x0, 0x9}}) 14:59:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000880)='/dev/nullb0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 14:59:12 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 14:59:12 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000240)=0x6, &(0x7f0000000040)=0xfffffffffffffffa) 14:59:12 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f00000000c0)=""/161, 0xa1) 14:59:12 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20002, 0x0) [ 373.423823][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:12 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000240)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x1a\x00@\x00\x00\x00\x00\x00\t\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\xb5\x00\xa3\r\xc8\x149\xdbU\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x12\xffa\xad\xee,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\xea\xba/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb7\"\xa9\xef\xa2\xd8\x03_\xee=[\x1a\x8e\xe3\x1cl\x145\xddC\x15(\xaf\'\fo\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5R\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xf0\x9f\x82\x9d\xae\x9cyg-\x972W\x00\x00Q\xe0\xab\xc1w\x03;-^(\x02\xe0\xd8\b#\x9a\xcd\xea\xe6\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99\xeau\x7f\x81@\b\xe1,\xc0Q\xf3\x16\x82\xb5[\x91Y\xb1\x1c$\xdf\x18\xf1\x96D\x16\xfa#\x03`\x91j\x14\xf2\xfb\x02X\x1eZ\xfb\x00m\xf0U\x7fl\x8bo\xf4\xf9p\x13\r\xc9\xac\xfda\x06\x00c\xaf\xfc\xf1{@\xf8\xc4\x93\x1f\x00\x00\x00\x00\x00\x00\x00\xa3\x02\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) 14:59:12 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:59:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:12 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8001) 14:59:12 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, 0x0, 0x0) getpgrp(0x0) migrate_pages(0x0, 0x4, &(0x7f0000000240)=0x6, &(0x7f0000000040)=0xfffffffffffffffa) 14:59:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 14:59:12 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 14:59:12 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) [ 373.697728][T17394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:12 executing program 5: select(0x40, &(0x7f0000000040)={0xfffffffffffffff8}, 0x0, 0x0, &(0x7f0000000100)) 14:59:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000030601020000000000000000070000090900020073797a30000000000900020075d900000000000005000100070000000500010007"], 0x4c}}, 0x0) 14:59:12 executing program 4: socket$inet6(0xa, 0x3, 0x3) 14:59:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000400)=""/189, 0xbd}, {0x0}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000240)=""/61, 0x3d}], 0x5, 0x3, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x8, 0x3}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r2, 0x36a3a31c, 0x9}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7ff, 0x8}, &(0x7f0000000240)=0x90) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000440)='C', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0xfffffffb}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000800)={0x0, 0x2b0, 0x800, 0x4, 0x3, 0x1}, &(0x7f0000000840)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60083ff2001406ecfd80000000000000001f0000000000bbfe8000000000000000000000000000aa00004e2251431c368b1d141bf38aeff0afb3a5c16795c9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20000f9f56294022ab1855aacf601c06ca18d7576678b133b0a068544bba5aababb362fcfad5a690b756b1dad11ddfdfefbb7151de74de3bada827dba49b708ed1eb1beb282da63d0cb5fc564d305e94bc8a7f746cd3e7ce5ad74a63b3a3775a4bb2dd0ca62667b840be007c3f9fd8e19366ec731bdd3c304cfdaced63a33e96faa9ad5dfc710c7f6520cd24c471a3fa71b716cb1e3c3af0d34e5847d2eb5a35ee6447d37479d027d0a8a818e3a94d922fb5d454e7bb09b40d654b6d26ae139d0bb9a8082"], 0x0) 14:59:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000153ca3"], 0x28}}, 0x0) 14:59:12 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40000140) [ 373.916162][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.040766][T17394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x6d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:12 executing program 4: bpf$ITER_CREATE(0x22, 0x0, 0x0) 14:59:12 executing program 2: bpf$ITER_CREATE(0xe, &(0x7f0000000d40), 0x8) 14:59:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0) 14:59:12 executing program 1: pipe(&(0x7f0000007380)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{}, {r0}, {r1}], 0x3, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x3]}, 0x8) 14:59:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 14:59:13 executing program 4: pipe(&(0x7f0000001180)) r0 = getpid() syz_open_procfs$namespace(r0, 0x0) 14:59:13 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) getpeername(r0, 0x0, &(0x7f00000001c0)) 14:59:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c0, 0x158, 0x0, 0x158, 0x158, 0x158, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x320) [ 374.228683][T17426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:13 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 14:59:13 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 14:59:13 executing program 2: socket(0x22, 0x0, 0x4) 14:59:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x6d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:13 executing program 0: socketpair(0x1e, 0x0, 0x1, &(0x7f0000000400)) 14:59:13 executing program 5: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="1c0000001a009b8a140000003b07001f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x4000000000009b8, 0x0, &(0x7f00000001c0)={0x77359400}) 14:59:13 executing program 4: socket(0xa, 0x0, 0xf77) 14:59:13 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000040)=@framed={{}, [@generic, @func]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2668f}, 0x78) [ 374.574372][T17426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:13 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) 14:59:13 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x400) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) syz_usbip_server_init(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0xc0400, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x80100, 0x0) 14:59:13 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xacef6000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00'}) syz_usbip_server_init(0x0) [ 374.741740][T17456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:13 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6007, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 374.884005][T17464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 374.890852][T17464] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.894628][T17465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 14:59:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) [ 374.956342][T17469] vhci_hcd: connection closed [ 374.958306][ T432] vhci_hcd: stop threads [ 374.968968][ T432] vhci_hcd: release socket [ 374.981255][ T432] vhci_hcd: disconnect device 14:59:13 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 375.093765][T17456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:14 executing program 1: syz_open_dev$usbmon(&(0x7f0000002540)='/dev/usbmon#\x00', 0x228, 0x0) [ 375.238334][T17486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.472283][T17467] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 375.478866][T17467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.533667][T17494] vhci_hcd: connection closed [ 375.534164][ T21] vhci_hcd: stop threads [ 375.567691][T17486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.567695][ T21] vhci_hcd: release socket 14:59:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB='T'], 0x74}}, 0x0) 14:59:14 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 14:59:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002100)) 14:59:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000100)) 14:59:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1b1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 375.599666][ T21] vhci_hcd: disconnect device 14:59:14 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000001980)) 14:59:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x2}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:14 executing program 1: msgget(0x3, 0x101) 14:59:14 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, 0x0) 14:59:14 executing program 4: connect$pptp(0xffffffffffffffff, 0x0, 0x0) 14:59:14 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x400) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xacef6000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @dev}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/222) syz_usbip_server_init(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000280)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0xc0400, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f00000004c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x80100, 0x0) [ 375.842522][T17511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:14 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000380)={0x10}, 0x10) 14:59:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, 0x0}, 0x78) 14:59:14 executing program 0: pipe2(&(0x7f0000000000), 0x84800) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @dev}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) syz_usbip_server_init(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={0x0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) 14:59:14 executing program 4: pipe2(&(0x7f0000000340), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 375.986281][T17519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 375.992851][T17519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 14:59:14 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) [ 376.051305][T17524] vhci_hcd: connection closed [ 376.051646][ T154] vhci_hcd: stop threads [ 376.083214][ T154] vhci_hcd: release socket [ 376.101785][ T154] vhci_hcd: disconnect device 14:59:14 executing program 1: syz_io_uring_setup(0x7aa2, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 376.158087][T17530] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 376.164660][T17530] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.189092][T17511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:15 executing program 4: pipe2(&(0x7f0000000280), 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 14:59:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 376.229731][T17535] vhci_hcd: connection closed [ 376.231100][ T684] vhci_hcd: stop threads [ 376.252643][ T684] vhci_hcd: release socket 14:59:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140)) [ 376.287939][ T684] vhci_hcd: disconnect device 14:59:15 executing program 1: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 376.396396][T17544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:15 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) [ 376.594746][T17523] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 376.601321][T17523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 14:59:15 executing program 5: syz_open_dev$usbmon(&(0x7f0000002540)='/dev/usbmon#\x00', 0x0, 0x0) 14:59:15 executing program 2: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:59:15 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000021c0)=""/236) [ 376.727936][T17544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.747972][T17530] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 376.754518][T17530] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 14:59:15 executing program 0: syz_io_uring_setup(0x76da, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7aa2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 14:59:15 executing program 4: r0 = syz_io_uring_setup(0x76da, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x7aa2, &(0x7f00000002c0)={0x0, 0x5053, 0x20, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 14:59:15 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0xc0400, 0x0) 14:59:15 executing program 2: getrusage(0x0, &(0x7f0000000180)) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 14:59:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:15 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/210) [ 376.849885][ T3191] vhci_hcd: vhci_device speed not set [ 376.919656][ T3191] usb 19-2: new full-speed USB device number 2 using vhci_hcd [ 376.962514][T17572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:15 executing program 5: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000680)) 14:59:15 executing program 2: pipe2(0x0, 0x72d92128c3fc7440) [ 377.020422][T14609] vhci_hcd: vhci_device speed not set 14:59:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001440)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000035c0)={0x2020}, 0x2020) 14:59:15 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) 14:59:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}}, 0x0) [ 377.089700][T14609] usb 9-2: new full-speed USB device number 2 using vhci_hcd 14:59:16 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000002200)=0xfffffbff) 14:59:16 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0) 14:59:16 executing program 1: socket$inet(0x2, 0x2, 0x4d) 14:59:16 executing program 4: perf_event_open(&(0x7f0000002040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:59:16 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) [ 377.313498][T17572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2002, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 14:59:16 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) 14:59:16 executing program 4: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) syz_usbip_server_init(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 14:59:16 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000000c0)) 14:59:16 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000040), 0x40) [ 377.590051][T17609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x40) 14:59:16 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) 14:59:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 377.673858][T17613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 14:59:16 executing program 1: sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x7fffffff) 14:59:16 executing program 2: io_uring_setup(0x29b1, &(0x7f0000000000)={0x0, 0xd3ce, 0x8}) 14:59:16 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xacef6000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/222) syz_usbip_server_init(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x80100, 0x0) [ 377.902292][T17629] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 377.908879][T17629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 377.946935][T17609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.967579][T17630] vhci_hcd: connection closed [ 377.968351][ T21] vhci_hcd: stop threads [ 377.978562][ T21] vhci_hcd: release socket 14:59:16 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400000) 14:59:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:16 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x400) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xacef6000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_to_batadv\x00', @dev}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/222) syz_usbip_server_init(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x41, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000280)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0xc0400, 0x0) [ 378.011050][ T21] vhci_hcd: disconnect device [ 378.082841][T17637] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 378.089416][T17637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 378.127824][T17639] vhci_hcd: connection closed [ 378.129173][ T154] vhci_hcd: stop threads [ 378.148516][ T154] vhci_hcd: release socket [ 378.157299][T17642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.184785][ T154] vhci_hcd: disconnect device 14:59:17 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) 14:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={0x0}}, 0x0) 14:59:17 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f00000032c0)='devlink\x00') [ 378.230707][T17613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 14:59:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:17 executing program 0: open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 14:59:17 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/207, 0x0, 0xcf}, 0x20) 14:59:17 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x1, 0x0) [ 378.476313][T17632] vhci_hcd vhci_hcd.0: port 1 already used [ 378.503665][T17642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f000000c940)={0x0, 0x0, &(0x7f000000c900)={&(0x7f000000ab80)={0xec4, 0x0, 0x11, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'@/-\\:\'[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}6\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-+)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x10]\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "23933550c27741b1aa01750a970c16378bb629198ad3540e97bc260013d0c38ac8c11f23e70cb034572094b6fdde5be5a2bf1c56048381aa27519c58f78797180e3f2cd6d3f104414831f37f7c779ceaf3ee069f8c0fc3aa0b1445ce5ceb984123f5dd87b2c1385447f7ad06b30d1ad399333d079d6534772f8eec93e43f04395b6ea898bb65141d901caf47a45b606aab3f006036f492cc7ec707262e763a0eac"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "1aecc33c836dcaa42b960fa2ec7d33d134b381f1ed33b0ae5b7b92c5de5ee19dc27e6fb7a636ead0589098a51ab172021957a24d0e31f494ac18f289af1590224f3c7b61cb7c3d9e878fa9a60c80754c1a9349ec94b038b64a59d6b52f9da51b02fd75e7b58753252414c3c19e3a8443a5ae5fa61b3af693eb01fd18d32dab87984a219fd45593f6b5983eb73bcd044e82d1645c3293d37e2a8b2ef49044f4f1b2f343f7505dba32163787f4b8b8ea3998d777476d8d154c4942163335129c08bdf63e4f959c16115f3e974baf69e119d381bab68712f1077d763fd21d825b770de32c84ef"}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(*:}]*:/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/@\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\&^)[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '@{(.)))*}\'$\\)8^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x9e{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'\xa8-(\xef&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/nvme-fabrics\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x91, 0x5, "eec95c0dff7d1e5b19a18e1850c9813beaf18103b960c645a1464b3380604d6185a1b13ff1242999c5c8a1b60927395f8876910b89b00f33c8c6a9ce2b87d1f1f45d7663c5fb8bf663d88638f78616c400405e190d856fdcbdad5fce3d7b1e411a018fe48682a193d861c94e3023630070887f10416efcb3cbf82935b7273ac4a810896aceb299346a06f86ef2"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "69129a48e3e75d1d4744b43dad31ac47456c6fdbdf2db3ed49a1666126c8527b060ea666233ac863258397de0ee36e8c85099fa3392d06e063b2259a1f7e0a3d5c1923bdf6cdf61982384e2ae24695ec9d0acaff65609b0be79e98eda3b3efc252e64d7a2505998f62559f0f5186639955eab5c4dd57d6981e5404cb61"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "dffdf2f5e6cdb64d77ad61d931a29fd2ab034d780bce21d4271c04af75955ab981ed3caf5c4f5496ced8f9c9b3aa4be79a58d518a5ea5b7730b3556994ee20a7b4ee712032c092c7227298c50fe8341feaf7f6c52d9bfd36b6561ed9711f93061f9a17dc5e"}, @ETHTOOL_A_BITSET_VALUE={0x735, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0xec4}}, 0x0) 14:59:17 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call, @ldst]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c3c}, 0x78) open_tree(0xffffffffffffffff, 0x0, 0x0) 14:59:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/udmabuf\x00', 0x2) [ 378.654909][T17662] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 378.661484][T17662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) 14:59:17 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000006ec0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 14:59:17 executing program 1: io_uring_setup(0x58d8, &(0x7f0000000000)={0x0, 0x0, 0x20}) 14:59:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x120}}, 0x0) 14:59:17 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 378.792377][T17673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:17 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002640)='/dev/rfkill\x00', 0x109a42, 0x0) write$rfkill(r0, &(0x7f0000002680)={0x7, 0x0, 0x2}, 0x8) 14:59:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) [ 378.930161][ T17] vhci_hcd: vhci_device speed not set 14:59:17 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={0x0}}, 0x20008001) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, 0x0, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000f40)=0x4, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, 0x0, 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, 0x0, 0x0) sendto$l2tp6(r4, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000f40)=0x4, 0x4) socket$bt_cmtp(0x1f, 0x3, 0x5) open_tree(0xffffffffffffffff, &(0x7f0000002ec0)='./file0\x00', 0x88000) pipe2$9p(&(0x7f0000002f00), 0x800) getresuid(&(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)) 14:59:17 executing program 2: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) [ 378.999714][ T17] usb 13-2: new full-speed USB device number 2 using vhci_hcd 14:59:17 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000005e80)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) [ 379.160090][T17673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x8}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:18 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 14:59:18 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvme-fabrics\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 14:59:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 14:59:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000002400)=0x4, 0x4) 14:59:18 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 14:59:18 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000840)='ethtool\x00') 14:59:18 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x10062, 0x0, 0x0) [ 379.357811][T17707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:18 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 14:59:18 executing program 4: pipe2$9p(&(0x7f0000002f00), 0x800) 14:59:18 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xf245}, 0x20) 14:59:18 executing program 5: io_uring_setup(0xa4f, &(0x7f0000000000)) 14:59:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x9}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:18 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002640)='/dev/rfkill\x00', 0x109a42, 0x0) write$rfkill(r0, &(0x7f0000002680)={0x0, 0x2, 0x2}, 0x8) 14:59:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYRES32], 0x70}], 0x1, 0x0) 14:59:18 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000480)) 14:59:18 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 14:59:18 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002640)='/dev/rfkill\x00', 0x109a42, 0x0) write$rfkill(r0, 0x0, 0x0) [ 379.724252][T17707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 14:59:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 14:59:18 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x1000}, 0x20) [ 379.922373][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:18 executing program 5: mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6f2785c7d7fd84b8, 0xffffffffffffffff, 0x0) 14:59:18 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x20) 14:59:18 executing program 2: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nvme-fabrics\x00', 0x0, 0x0) io_uring_setup(0x58d8, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 380.294419][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0xe}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:19 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe796247736f01b2c, 0x10, r0, 0x0) 14:59:19 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005d00)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, 0x0, 0x3a) 14:59:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) sendmmsg$alg(r0, &(0x7f0000005300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) 14:59:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:59:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003200)={0x2020}, 0x2020) 14:59:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:59:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) [ 380.566113][T17766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:59:19 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:59:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:59:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nl=@proc, @hci, @can}) 14:59:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0xf}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:19 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) 14:59:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0xffffff93) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 14:59:19 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000180)={0x18}, 0xfffffffffffffebf) 14:59:19 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d0"}]}}, &(0x7f0000000140)=""/169, 0x2a, 0xa9, 0x1}, 0x20) 14:59:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0xd, 0x0, &(0x7f0000000100)) [ 380.924944][T17766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000002840)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) 14:59:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 381.072190][T17795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0xc) 14:59:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) 14:59:20 executing program 2: syz_io_uring_setup(0x20862, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 14:59:20 executing program 5: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5cbe, &(0x7f0000002980), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002a00), &(0x7f0000002a40)) [ 381.438987][T17795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:20 executing program 1: setitimer(0x2, 0x0, &(0x7f0000000480)) 14:59:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x226}, 0x40) 14:59:20 executing program 4: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x99}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:59:20 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x11}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:20 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 14:59:20 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x208100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@map_val], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25902, r0}, 0x78) [ 381.547212][T17818] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 14:59:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5ea8de1fd6321452d791cc0576c8624862bd395fea6a640434269e5cc27d7b0ca5e61ca9762e563c2e3523a0000e3be874cf2646c739df59fb6de9692b255e95b24187be7fede2e70abc9944edf099471020000000000000018fc95ffda3c5c7581968691a170393c69cfeba5233c29b98f50e172cb42ea3d704f245af0e736e3833c298a5ae947b5d94c036f10c4889e3ed7956906a311375c4c838c184046e5f1eb4f5dfe8dc3468e05eccff881b2b107cc9021b179688be70fb4d5e3dded244d8f93", 0xe4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 14:59:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x132a00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:59:20 executing program 5: syz_io_uring_setup(0x4749, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 381.613419][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 14:59:20 executing program 1: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000028c0)) syz_io_uring_setup(0x5cbe, &(0x7f0000002980)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002a00), &(0x7f0000002a40)) [ 381.655859][T17825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.691220][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.734232][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 14:59:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x226, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) [ 381.783677][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.814955][T17836] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:59:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) clone3(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x0, 0x0) getpid() [ 381.831260][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.843419][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.858895][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 14:59:20 executing program 1: syz_io_uring_setup(0x546b, &(0x7f0000000000)={0x0, 0x938b, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 381.875962][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.903773][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.924994][T17820] kvm [17811]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 381.954966][T17844] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 14:59:20 executing program 2: syz_open_dev$vcsa(&(0x7f0000000cc0)='/dev/vcsa#\x00', 0x0, 0x4d6041) [ 382.018410][T17825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:21 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 14:59:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x12}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:21 executing program 1: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 14:59:21 executing program 2: clone3(&(0x7f0000000900)={0x20000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x1}, 0x58) [ 382.254443][T17866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.588169][T17866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x31, 0x0, 0x0) 14:59:23 executing program 5: syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 14:59:23 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) 14:59:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x550, 0x370, 0x118, 0xffffffff, 0x370, 0x0, 0x820, 0x820, 0xffffffff, 0x820, 0x820, 0x5, 0x0, {[{{@ipv6={@local, @remote, [], [], '\x00', 'wg0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@empty, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private0, @port, @icmp_id}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'syzkaller0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:crack_db_t:s0\x00'}}}, {{@ipv6={@mcast1, @loopback, [], [], 'syz_tun\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 14:59:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x550, 0x370, 0x118, 0xffffffff, 0x370, 0x0, 0x820, 0x820, 0xffffffff, 0x820, 0x820, 0x5, 0x0, {[{{@ipv6={@local, @remote, [], [], '\x00', 'wg0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@empty, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private0, @port, @icmp_id}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'syzkaller0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:crack_db_t:s0\x00'}}}, {{@ipv6={@mcast1, @loopback, [], [], 'syz_tun\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 14:59:23 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x13}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:23 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x73d50548be7c1da6) 14:59:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, 0x0, 0x0) [ 384.770773][T17892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:23 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000002dec0)=@bpf_lsm={0x1e, 0x1, &(0x7f00000003c0)=@raw=[@func], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:23 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003480)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 14:59:23 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) 14:59:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x2]}, 0x40) 14:59:23 executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 385.053682][T15978] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 385.113787][T17892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.309618][T15978] usb 6-1: Using ep0 maxpacket: 16 [ 385.460460][T15978] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 385.639756][T15978] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 385.648836][T15978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.657000][T15978] usb 6-1: Product: syz [ 385.661341][T15978] usb 6-1: Manufacturer: syz [ 385.665953][T15978] usb 6-1: SerialNumber: syz [ 385.712280][T15978] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 385.914952][T15978] usb 6-1: USB disconnect, device number 17 14:59:25 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 14:59:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 14:59:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 14:59:25 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x82a2, 0x0) pwritev(r0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001640)='-', 0x1}], 0x4, 0x0, 0x0) 14:59:25 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x14}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:25 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) [ 386.510609][T17942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:25 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:59:25 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x82a2, 0x0) pwritev(r0, &(0x7f00000026c0)=[{&(0x7f00000001c0)="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", 0xacc}, {0x0}, {&(0x7f0000001540)="a5ee740eda31dc0180cb160d7f115eca21b7baa7f889ff90058dd54b360e43ace2f3e2fd454290d770b273b9ae4b3bdfa6042a9f75da4d632d909b3649de22ac34ab5e548db05e4f930746eb17841f95e5f5dc03a639c98028f474f52f57f2a052ef07e0e449a9bece9376802c685e089245cd71ea80d2b78eda77c92554b04d65dc51933f3a02435678140ca7797fcf7346362becd5275fa7b360c8cf2d88c1c1d98709d000380041f424d1997fc480e54d6eb1f48cbab0bce512103fc81ff1d0", 0xc1}, {&(0x7f0000001640)="2d279512f5e00336d3207baad97948eb8fd258abb8cfdbc7b929a0d19e60de96afeeac8b9cb15f3473951693e0022048eca79571aca0bff11c14e73a03bf830fed28424276d2", 0x46}, {&(0x7f00000016c0)="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", 0x10d}], 0x5, 0x0, 0xb26) 14:59:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:59:25 executing program 5: open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) open$dir(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x400000, 0x0) 14:59:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x4000, 0x0, &(0x7f0000000000)) 14:59:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 14:59:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000001400)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000011c0)=[{0x0}, {&(0x7f00000000c0)="a5", 0x1}], 0x2}, 0x0) 14:59:25 executing program 5: openat$ptmx(0xffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x20000, 0x0) [ 386.849782][T17942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x1) 14:59:26 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000040), 0x4) 14:59:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="771b83cb5fb5a3468de6c3a58de0df2555a90c132bf1e7ca0c836957569f260b95c4c5df7a7f36d9b39590ff4dbfe6d3fa87c10e1d337bf800191fac4e26581d6127203371743b2242a91578d6ec81a4247ca4ec326963531719cb2e63aaa5f67c090d6ccb6a5c8d0d60c11983082907c274b232", 0x74) 14:59:26 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000001480)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000014c0)="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", 0xec0}], 0x1}, 0x0) 14:59:26 executing program 5: getresuid(0x0, 0x0, &(0x7f0000001600)) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 14:59:26 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001440)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x20100) [ 387.370156][T17981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:26 executing program 0: open$dir(&(0x7f0000001680)='./file0\x00', 0x40200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) 14:59:26 executing program 5: r0 = socket$inet6(0x1c, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x27, &(0x7f00000003c0), 0x4) 14:59:26 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) 14:59:26 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[{0xc}], 0xc}, 0x0) 14:59:26 executing program 0: clock_gettime(0xb, &(0x7f00000004c0)) 14:59:26 executing program 2: r0 = socket$inet6(0x1c, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x27, 0x0, 0x0) 14:59:26 executing program 5: clock_gettime(0x0, &(0x7f0000000540)) [ 387.723492][T17981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:26 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x16}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000), 0x4) 14:59:26 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) fcntl$getown(r0, 0x5) 14:59:26 executing program 4: open$dir(0x0, 0x240509, 0x0) 14:59:26 executing program 5: open$dir(0x0, 0x3302c1, 0x0) 14:59:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x1b, 0x0, &(0x7f0000000080)) 14:59:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) [ 388.004086][T18031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:26 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000140)=[@rights, @cred, @rights], 0x34}, 0x0) 14:59:26 executing program 0: pipe2(&(0x7f0000000480), 0x100000) setrlimit(0x8, &(0x7f0000000740)={0x0, 0x9}) pipe2(0x0, 0x0) 14:59:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000180), &(0x7f0000000080)=0xb8) 14:59:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000001480)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000014c0)="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", 0xf6d}], 0x1}, 0x0) 14:59:27 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, &(0x7f0000000080)) [ 388.370405][T18031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x1) write$P9_RSTATFS(r0, 0x0, 0x0) 14:59:27 executing program 5: r0 = timerfd_create(0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 14:59:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x7, 0x0, 0x0) 14:59:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$P9_RLOCK(r1, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xf) r2 = gettid() tkill(r2, 0x1000000000016) 14:59:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:59:27 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x17}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:27 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup2(r0, r1) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000940)) 14:59:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x5452, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}) ioctl$TIOCL_BLANKSCREEN(r0, 0x5608, &(0x7f0000000040)) [ 388.581191][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x70d}, 0x1c}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x5451, 0x0) 14:59:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:59:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x10) 14:59:27 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x5450, 0x0) 14:59:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = epoll_create(0x207) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TCGETX(r2, 0x5432, 0x0) 14:59:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000180)=0x80) dup3(r0, r1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:59:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() write$P9_RLOCK(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x1000000000016) 14:59:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000001080), 0x4) [ 388.962383][T18071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:27 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x18}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:27 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x202, 0x0) write$P9_RSYMLINK(r0, 0x0, 0xffffffc0) 14:59:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:59:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSPGRP(r0, 0x5451, 0x0) 14:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) 14:59:28 executing program 0: r0 = epoll_create(0xab) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 389.172184][T18114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000000000017e, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 14:59:28 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006b00000008000100000000000a000600018c48f05f92ce80"], 0x28}}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) tkill(r0, 0x1000000000015) 14:59:28 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0xffffffffffffff1f) 14:59:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000001040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 14:59:28 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r1, r0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b40, 0x0) 14:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001580)='/proc/self/attr/exec\x00', 0x2, 0x0) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) [ 389.521626][T18114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:28 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x19}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r0) socket$inet(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 14:59:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "1a0000e2ffff0acaffffff0000e1fffffff300"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$GIO_CMAP(r3, 0x4b70, 0x0) 14:59:28 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:59:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x6}, 0x24}}, 0x0) getsockname(r0, &(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000b80)=0x80) dup3(r0, r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:59:28 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x80000002}) 14:59:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x27, &(0x7f0000000000), 0x4) 14:59:28 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) write(r0, &(0x7f00000000c0)="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", 0xe01) select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0xff}, 0x0, 0x0) [ 389.817545][T18163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:28 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x5d, 0x0, 0x0, 0xfffffffffffffd9d) 14:59:28 executing program 4: getsockname(0xffffffffffffff9c, 0x0, &(0x7f0000001080)) 14:59:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x8) 14:59:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x9) 14:59:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x1a}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:59:29 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x8, 0x1}, 0x8) 14:59:29 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x28, 0x0, 0x0) 14:59:29 executing program 2: sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) open(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 14:59:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000040)="470139ec38ce564eca79a129be745870499ba893b2780117d2c2456b3b83f1620c8152807aaabe2eb351d3d0", 0x2c}, {&(0x7f0000000200)="d473faa433720c614c666830133ddc872b7ecb7ab02da90db38f9bdffb754be8acbd82dccbe9971b9d5bc6147ebe24f8981a3439ebba0cd03b9850a138692a1fdeb82b30aad9808808c160d1b67f20b6bb7173fdbe2a0f2becfaaa526344c5559a6ce26bb6472badb5f515e15a60c3ad18b5588e91384ca6e2977c0642ea6bca74b056090c5a337959eaf848f7eed4477e17615d6aca1a4d855b93c0d07eea4a911a778c963128dbd7903dc6c04ea5d7539a48a13377414bfb8c8a5e06f68a8bdd559c8181ffbbd6935ae7e13af5697245369c0f096143124210ce3dfa7c3d388819e4b3f10ac6118a68d6d645dadfb47f62f096f99ed820e952483d01ea35ab080bc5a2341520dcf50f4e9016bc0410a5bd36359b3e01fe1e0c072133c98e9f3f86ff3a962b61a899a3a189189d0b93a0d81b1b7292718db02a77b06156ab587cbab9436456d095d76e425097d63e89e1652fc5e11240261262d9c5e554b275e3ddbe840374f50325c96cc2122a6caaa5abd70b5add2ef0a8227b541ae18fc8704eb1f97f577c0fe3689a81c047c57c7f9c509ee1cf18e880f68d00aed79076dcad17c30a54ac099b198a11d072e8f3f5df0b423172e66b2bacec4ab30f9426476eb719a0902581f58ead5b2f3e4302a44032972d649af0a35826016b320b5b193713959d73ce511c7184cbe43c1fda218aaa727370e5f31c65db64240dc853e984518ba9d467024c0e0c8c20885ce46b102d22df2814c063f68bb97fdd1f9f1ecce40182783cde587305516c611090d82bbecd90e5f6da49c36115e289e7a63b348b931c8a6533d21c65fba1c4632daafd34630192092168a718ddb4223a12fddc096337ed738c8d7b92ec02c2dcdef3ae586eb2ac82a993c1a968385e1219672787a2f5f2f9cb4b6e36f9123ed927e3a5889db48b28b8a83409d2eaea66a334abcdfa77625721aae0c74480cf8d4be750aad6ee1a7f9803466bed5596c78360d84bc28a5d209b61418d46aa76bdaddc9ffc4851ed3708187194ef469a08b7b2fa493ef261def3da9ca11def3f798a737b947e60b8c154adb031544acf87b1f5991640a49c4bbc84592b9bb3cae51bed32268402eb1f638ed66d1382ab14393a0791af219bfea81b4ad8c6aee95064d6badbee63c68a7fef26b1ffcda99999a9bddfb0d857f681422099a6efc23d67092cca8431f4ab4f851a5966e5d76f6b38709f6979216fff31b7372f9ab832e0d03311a5a139eb9199949cc5b591611b64f3e9ef9a14541c4d344bc10543f1b2f28243fa35667fa9f5c31e984fbe9656e19ce8ecf38420ff27ea85a1a8287448086471ae0cb789698383a5ad9833447128a5d5ae4ae41da56270087d17c2406d2f37e4a6a0b84dc8bddc96a827393f2efb8d997ca0cefd1a70b2f355360b16885302982b0e0a495eea689d50f580b656378a3f9ed20cc25c6d37c102c732c27c9000dc48b38a07776970a4dfab47f02d89a54bc614276c15f13c329c51c6aeb87a6c9fbf14bb8ca200414b43f8ba44699be94f79623217a6f073f1953ced84bb2353305221bd4b13e71e84beb4b71627eb5bb8735999f6f75d92a77aef42bbdb7b66927f918de2d2f5bc71b70cb95850acb435941dde1844059ee50926c522394723c079d491ef9edfae4a2e4becea2de77d165f859b9951c65abec05cb3eb415316ffea7ffca589a63fc83ac3e33b712412c7a99c804416e4166fa86f7511381f8014875acd8eb1670bd841dc2adba894b7dad99899849937f4d5a8e6016122d3832a4d07c886a54f7985de3f9dae4b3420fd108d652cf33fb1ac1d1f83cc9da6e2602eb851a5c5a2d82517988fb62354dcc366a5d32568b9f7b64e5668f4cccc86ee9db44b308487862b78365a7d60b3c4ab9121f2ae663ea15e3b837244b8e53067af322387c45721c83c65c39e79553a94d4ee6d7acf6d13b937889ad2045911dfba5e", 0x575}], 0x2}, 0x0) [ 390.183218][T18163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.287577][T18191] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 14:59:29 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 390.343898][T18198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x20, 0x1, "0f"}, 0x9) 14:59:29 executing program 0: sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 14:59:29 executing program 1: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 14:59:29 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$sock_int(r0, 0xffff, 0x1019, 0x0, &(0x7f0000000040)) 14:59:29 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) [ 390.667484][T18198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x1b}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x890d, 0x0) 14:59:29 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000cc0), 0x20000cd0) 14:59:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000061, 0x0, 0x0) 14:59:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x2}, &(0x7f0000000100)=0x20) 14:59:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5450, 0x0) [ 390.815828][T18233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:29 executing program 4: socket(0x26, 0x5, 0x8) 14:59:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@loopback, 0xfffffffe}) 14:59:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000005a40)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="7a9b1b6939ce2af61228c3fae65c", 0xe}], 0x1}}], 0x1, 0x0) 14:59:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp-reno\x00', 0xb) 14:59:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, 0x10) 14:59:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0xbc}) [ 391.146924][T18233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x1c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xa, &(0x7f0000000040)=@gcm_128={{}, "463613c17e074146", "363f13456f1cc40c8debb88fd911a4f3", "459545f1", "76a4f2010d4a6211"}, 0x28) 14:59:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a00fffe"], 0x1c}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:59:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040), 0x4) 14:59:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000000000200e3ffffff00000000000008000b"], 0x24}}, 0x0) 14:59:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 14:59:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000080)={'wg0\x00', @ifru_ivalue}) 14:59:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @empty}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) [ 391.349649][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:30 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff}) connect$pppoe(r0, &(0x7f0000000500)={0x18, 0x0, {0x0, @link_local, 'syzkaller1\x00'}}, 0x1e) 14:59:30 executing program 2: perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) 14:59:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0x5f06de384fd4219d, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 391.699074][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x1d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:30 executing program 2: perf_event_open$cgroup(&(0x7f0000000540)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:59:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000040)="3fc5e4", 0x3}, {&(0x7f0000000100)="64fcc2af353479", 0x7}, {&(0x7f0000000180)="fc", 0x1}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast}}}], 0x20}}, {{&(0x7f0000000500)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x44) 14:59:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040), 0x4) 14:59:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 14:59:30 executing program 4: setresuid(0xee00, 0xee00, 0x0) unshare(0x50070800) 14:59:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd", @ANYBLOB], 0x0) [ 391.891948][T18293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:59:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @local}}) 14:59:30 executing program 0: setresuid(0xee00, 0xee00, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) setresuid(r0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) 14:59:30 executing program 2: io_uring_setup(0x4770, &(0x7f0000000880)={0x0, 0x0, 0x7}) 14:59:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @local}}) [ 392.288774][T18293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x1e}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:31 executing program 1: renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 14:59:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x500, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 14:59:31 executing program 2: setresuid(0xee00, 0xee00, 0x0) syz_io_uring_setup(0x789c, &(0x7f0000000180), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 392.541186][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x0, 0x0, "5c78e89425ca2e6b09358c98f024a3c74b0e8977c6d2bb088d46514c376b0688d3beb4d3e07422b30fb0d02d7185f0325ec40939eea3e45c4af650d642bb4e4fd3728d882b49f4b3addab69c2a724ee3"}, 0xd8) 14:59:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 14:59:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x813, 0x0, 0x0, {@in6=@loopback}}, 0x28}}, 0x0) 14:59:31 executing program 2: getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000040)) 14:59:31 executing program 1: r0 = socket(0x26, 0x5, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 14:59:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="18d6b173", 0x4) 14:59:31 executing program 2: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x9, 0x0) 14:59:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 392.892796][T18320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x21}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:31 executing program 5: add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0xfffff, 0x0) 14:59:31 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001980)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 14:59:31 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f00000012c0)={&(0x7f0000001280)='\x00'}, 0x10) 14:59:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x0) 14:59:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "0e389ccf5b285f2795e5aa7f2d5bc77b5c7725b58995190ab71871e9aebbbd2733ffb6afa2198355b24d1d7a036055457da9e784d13386b2d60cd3a933d6e084307221793337546ac5e2895b74b0fc78"}, 0xd8) [ 393.068482][T18352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5457, 0x0) 14:59:31 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x3, 0x0, 0x0) 14:59:31 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsu\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001200)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) 14:59:32 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x0, &(0x7f0000000100), 0xfe12) 14:59:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) 14:59:32 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x22}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:32 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 14:59:32 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 14:59:32 executing program 4: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="f9", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, r0) 14:59:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1600bd74, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 393.419198][T18352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:32 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x458000, 0x0) 14:59:32 executing program 4: msgsnd(0x0, &(0x7f0000000000), 0xffffff25, 0x0) 14:59:32 executing program 5: r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) [ 393.545379][T18378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:32 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') 14:59:32 executing program 1: syz_io_uring_setup(0xde9, &(0x7f0000000080)={0x0, 0x0, 0x26}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:59:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:59:32 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x270842, 0x0) [ 393.876265][T18378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:32 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x23}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:32 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x7) 14:59:32 executing program 0: bpf$OBJ_GET_PROG(0xf, &(0x7f0000000400)={&(0x7f00000003c0)='./file0/file0\x00'}, 0x10) 14:59:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x4bfb, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) 14:59:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8912, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8918, 0x0) [ 394.097146][T18407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1600bd7a, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:32 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x42c0, 0x0) 14:59:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x19, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:33 executing program 4: r0 = msgget(0x2, 0x100) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/13) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/42) msgctl$IPC_RMID(r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0xff}) 14:59:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8915, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 394.437214][T18407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x24}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:33 executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) 14:59:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5407, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x36) 14:59:33 executing program 2: setrlimit(0x0, &(0x7f00000002c0)) 14:59:33 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5450, 0x0) 14:59:33 executing program 5: socket(0x25, 0x3, 0xfffff2ec) [ 394.652356][T18439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 14:59:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xfffffffc, &(0x7f00000000c0)=@framed={{}, [@func]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:33 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4, 0x13, r0, 0x80000000) 14:59:33 executing program 5: futex(&(0x7f0000000040)=0x2, 0x0, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) [ 395.010801][T18439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x25}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) sendmmsg(r0, &(0x7f0000009980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="23d9f3d5f0c3dbdf3d0e16f4f6cacaa0fc6f6bcf26eb1936f62648ceed4347c3918bb41a25c43bae0948fce581e1b7ee0f584cbd3556e9c13c423209df9413b13b81972790956232990c04b7b837083a6850c6ecbc537f", 0x57}, {&(0x7f00000002c0)="fb25bf6a6729b7e0f888f92f1b78967e17595c181ce680e3edf5559490ff378497b7b73ec16d50b64754f5da795f430b8518edc72894edefb49f2577acfbd03dcec61b2f72e563640083", 0x4a}, {&(0x7f0000000340)="d5901685a901cf7ee4c723d93ef185ae484b", 0x12}, {&(0x7f0000000380)="21c58cecf3b1baf3bf9263419411f41ec249c0e4b1f12b045c7fa5e5a30846419f768f9aa2ca88be12d89598f2bb30ca326ec1622982eebe4253933d20dd3a60600d600455b28c161c69aec298588cf4d28289dee2d81bd4e33b4ca22c3897e92eb64abdd6247da4100d5321aa52afc405490fa7fefe48ce2041e2ab23a45d433110261fbc84b4733797e6abb263668a9c188753f7c2a527de17fec264a593c95b212cb9a36be775757761524cec4704865a93733edfd38292437f2890355a485d2f99d6c082d5b6d99b004479b081a3acfc6a41d587", 0xd6}, {&(0x7f0000000480)="c0cc487075509e66ca0d77bf7483ede63661d0779edb04e5711d323327d9c407528ac92886bbae371e0b7660afbec60f22d16a6c6ec0a2fdaaa398fce6f25914fcbba15c50adf2121fe4221a14ffd5e8c1bb77b1d387c97b9dcbd0f54aff8854b19725288c11a7cc6f1358477b54c1d61e6dd616e4790732314a76d3c995563d8ed8b521a9928a2402ff95c61f80579e495c255359af9823431bc320c38dcdcbaf31ceb74180dbcce4439a5529f89626b08ea9cb968d6844d77d", 0xba}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="a5135b9f2108ef042577e1be17f44f433ae8338e5bffade1699ab93bb4d111cfb3244d94bd8bb58099a2f9ee832f35f5ce01996687273cad3613764a53da7c21b945478467b9e5eebb9bcdbe1d3e", 0x4e}, {&(0x7f0000000740)="55e8a0cf6dc716c754d3e4e6b187f124ddd6442fff2e999b4f0fb3debd8ea8829fa56147238ae80cb3498d476c1c44e73ae9baedaf8706f6ed75a5dcd36e3f4868d81e3b6984265227d08fee528348bf7bd0365c22746764c841dee4994da6b34b1bb4b058a92959c17e56751c2446c11a3a2979152dcdd04ceb5033da2de38077a2f36f0fa0ee35557abf13a56967948d2decdf570be73e882a0327a7e1affcd6b7a2b9e4e262774af502c0d9b4e6ae4216734b5c55a2883d466029", 0xbc}, {&(0x7f0000000800)="047faf5be49bb970a7d2744bffed7bd59cf4a900d6cb75fd80d064c7b3744595bc9a5bae64342a90857f141620b757", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)="20f78e889f199249f722447b9b1a78cb5683eafa1c4a06affd9e4d24da4e802091be764be17bf954ac1b357819ed8ef87389ca9dceae8c1406", 0x39}, {&(0x7f0000000b80)="4702e6ec6c72252860c883ace3ef6d8812bc7954e188e529c19d996a1d653294391a8308e24c3e542260252aaa2369f2dd107db5e03c621046326ea480075ed4ff40ad2f60e9bebd22bedeb6ca5567b120aae180ffab997b167e14ebaf1e32bc0d5b59cac66cd8b0d87ebadbd8dde28aefbae03746ddef08aff128af41fb1155c4c118be790f5198e25469e86325957e", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002180)="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", 0x8bc}], 0x1}}], 0x4, 0x0) close(r0) 14:59:33 executing program 4: socketpair(0x28, 0x0, 0x0, &(0x7f0000001180)) 14:59:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) 14:59:33 executing program 1: syz_io_uring_setup(0x27a4, &(0x7f00000000c0)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 14:59:33 executing program 5: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x8, &(0x7f0000000080), 0x1) 14:59:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x5, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x4b67, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x2000, 0x5, 0x4, 0x1}, 0x40) [ 395.212734][T18469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x700, 0x0, 0x1}, 0x40) 14:59:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:34 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 395.593349][T18469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.631595][ T34] audit: type=1326 audit(1606057174.447:8): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fe0549 code=0x50000 14:59:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x26}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:34 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x850000, 0x0) 14:59:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) 14:59:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:34 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) [ 395.674433][ T34] audit: type=1326 audit(1606057174.447:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 395.707140][ T34] audit: type=1326 audit(1606057174.447:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 395.796261][T18496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.810809][ T34] audit: type=1326 audit(1606057174.447:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 14:59:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, 0x0, 0x0) close(r0) 14:59:34 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001980)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f00000019c0)) 14:59:34 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) getresuid(&(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)) [ 395.848737][ T34] audit: type=1326 audit(1606057174.447:12): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 14:59:34 executing program 1: bpf$MAP_CREATE(0x5, 0x0, 0x10) [ 395.881028][ T34] audit: type=1326 audit(1606057174.447:13): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 395.911608][ T34] audit: type=1326 audit(1606057174.447:14): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 395.968480][ T34] audit: type=1326 audit(1606057174.447:15): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 14:59:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5419, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x31, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 396.083739][ T34] audit: type=1326 audit(1606057174.447:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 396.135899][ T34] audit: type=1326 audit(1606057174.447:17): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0549 code=0x50000 [ 396.158665][T18496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:35 executing program 4: keyctl$revoke(0xc, 0x0) 14:59:35 executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f0000008ec0)=ANY=[@ANYBLOB="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"], 0x1}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x300, 0x1000000, 0x0) 14:59:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b52, &(0x7f0000000040)={0x0, 0x0, 0x800}) 14:59:35 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x200401, 0x0) syz_io_uring_setup(0x1c4, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 14:59:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x27}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:35 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') [ 396.346189][T18523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote}}}}) 14:59:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x36, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe0, &(0x7f0000000140)=""/224, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:35 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x10, r1) 14:59:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006780), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x10}, 0x0, 0x0, 0x0}) 14:59:35 executing program 5: pipe(&(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) 14:59:35 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x1e, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 396.705215][T18523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x48}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) 14:59:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 14:59:35 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x894c, 0x0) [ 396.913286][T18556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:35 executing program 1: clock_gettime(0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x202840, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 14:59:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x9, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 14:59:35 executing program 0: futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 14:59:35 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000100)={0x10000000}) 14:59:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x14, 0x0, 0x0) 14:59:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8903, &(0x7f0000000040)={0x0, @nfc, @generic={0x0, "e90fddcd7a0ef67f6332b3cc173d"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}}) [ 397.261858][T18556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x50, &(0x7f0000000000)=""/223, &(0x7f0000000140)=0xdf) 14:59:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x7}, 0x40) 14:59:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), 0x4) 14:59:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x842}, 0x40) 14:59:36 executing program 5: syz_io_uring_setup(0x205585, &(0x7f0000001ac0)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001b40), &(0x7f0000001b80)) 14:59:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x42, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 397.501148][T18593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:36 executing program 2: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) 14:59:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x4b44, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 397.869974][T18593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x60}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:36 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000002340)={0x58, 0x12, 0x205, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "cc99a86d"}]}, 0x58}}, 0x0) 14:59:36 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)="d466", 0x2, r1) 14:59:36 executing program 1: futex(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x0) 14:59:36 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x7fffffff, 0x8) 14:59:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x0) close(r0) [ 398.078696][T18630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 14:59:36 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000004180)={0x18, 0x0, r1}, 0x18) 14:59:36 executing program 2: add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000380)="4331cb109a07ae369dc934802a553af4db6de58bde93b627173c6d45ce5ec172645661214f8f83b3f5d3f7694475aaeda369ff079fa0370ff7a42b99f2b77cced6169d79a1fde6b5c16b99d8785a3e91356d23247d65b1ed92887eea1e36da05bc339813b11e7eb2e64c88f27e7d883825d92fa45ddf987b0539a7c6996781cd6f96", 0xffffffffffffff23, 0x0) 14:59:36 executing program 5: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0xa, &(0x7f0000000080), 0x1) 14:59:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x0) close(r0) 14:59:37 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000002340)={0x50, 0x12, 0x205, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) [ 398.480244][T18630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x68}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:37 executing program 4: openat$cgroup_type(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) 14:59:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000002c0), 0x4) 14:59:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x50, 0x0, &(0x7f0000000140)) 14:59:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x0) close(r0) 14:59:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000002c0), 0x4) 14:59:37 executing program 4: bpf$MAP_CREATE(0x2, 0x0, 0x700) 14:59:37 executing program 1: socket(0x29, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 14:59:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @nl, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, @rc={0x1f, @fixed}}) [ 398.683245][T18659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x0) close(r0) 14:59:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 399.007635][T18659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x6c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:37 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 14:59:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, 0x0, 0x0) 14:59:37 executing program 4: socketpair(0x2c, 0x3, 0x20, &(0x7f0000000200)) 14:59:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19}, 0x40) 14:59:37 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0xfffffffffffffea8) 14:59:38 executing program 5: socket(0x29, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:59:38 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) 14:59:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) read(r0, 0x0, 0x0) 14:59:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x1}, 0x40) [ 399.243487][T18694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x0, 0x0, 0x0, &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read(r0, 0x0, 0x0) 14:59:38 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x74}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:38 executing program 2: socket(0x2, 0xa, 0xffffffff) 14:59:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x40) 14:59:38 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) 14:59:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, 0x0, 0x0) [ 399.575604][T18694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.735641][T18721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000040)=""/25, &(0x7f0000000080)=0x19) 14:59:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x49, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:38 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 14:59:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x13, 0x0, 0x0) 14:59:38 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) [ 400.079401][T18721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @nfc, @generic={0x0, "e90fddcd7a0ef67f6332b3cc173d"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x3f000000}) 14:59:39 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) 14:59:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x7a}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) 14:59:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @dev}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @ethernet={0x0, @remote}}) 14:59:39 executing program 1: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x780, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) 14:59:39 executing program 0: read(0xffffffffffffffff, 0x0, 0x0) 14:59:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x3a, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 400.383252][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:39 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 14:59:39 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x2, 0x0) 14:59:39 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 14:59:39 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb01001800000000000000880000008800000007"], &(0x7f00000000c0)=""/4096, 0xa7, 0x1000, 0x1}, 0x20) 14:59:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x13, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x71}) 14:59:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 400.758213][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.871980][T18768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:39 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x17, 0x0, 0x0) 14:59:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:39 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 14:59:39 executing program 4: socket(0x28, 0x0, 0xc0000000) 14:59:39 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) [ 401.121882][ T34] kauditd_printk_skb: 58 callbacks suppressed [ 401.121904][ T34] audit: type=1326 audit(1606057179.937:76): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18737 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f3f549 code=0x0 14:59:40 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) [ 401.185738][T18768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x560c, 0x0) 14:59:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0xf}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 14:59:40 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x2}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:40 executing program 4: futex(&(0x7f0000000040), 0x0, 0x2, 0x0, 0x0, 0x0) 14:59:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x9c, &(0x7f0000000180)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:40 executing program 2: clock_gettime(0x77ed8bc86c5cfe2c, 0x0) [ 401.493836][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:40 executing program 5: request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='/dev/sg#\x00', 0xfffffffffffffffe) 14:59:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 14:59:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x4) 14:59:40 executing program 1: clock_gettime(0x5, &(0x7f0000001640)) 14:59:40 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f0000008ec0)=ANY=[@ANYBLOB="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"], 0x1}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x300, 0x0, 0x0) 14:59:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 14:59:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000040)) [ 401.840841][T18796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:40 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x2000, 0x5, 0x8c0, 0x1}, 0x40) 14:59:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x4b72, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:40 executing program 4: bpf$MAP_CREATE(0x1c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:59:40 executing program 5: bpf$MAP_CREATE(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:59:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8982, 0x0) 14:59:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000002c0), 0x4) [ 402.074115][T18830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:40 executing program 0: unshare(0x600) openat$full(0xffffffffffffff9c, &(0x7f0000001400)='/dev/full\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 14:59:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @random="e0d75b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2=0x7f000001}}}}}}, 0x0) 14:59:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000500)=0xe, 0x4) 14:59:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}) [ 402.421624][T18830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:41 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:41 executing program 4: futex(&(0x7f00000000c0), 0x1, 0x0, 0x0, 0x0, 0x0) 14:59:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0xfffff801, 0x4) 14:59:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x0, &(0x7f0000000080)={0x0, 0x0}) 14:59:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) keyctl$session_to_parent(0x12) 14:59:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) 14:59:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x15}]}) 14:59:41 executing program 2: r0 = socket(0x2c, 0x3, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xffffff7f}}, 0x0) 14:59:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 14:59:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b52, &(0x7f0000000040)={0x0, 0xfff, 0x800}) 14:59:41 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, 0x0) [ 402.655293][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5413, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:41 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x20) 14:59:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) 14:59:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:59:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0xe, r1) 14:59:41 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fb842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x4000000000010046) socket$inet6_tcp(0xa, 0x1, 0x0) [ 403.012103][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0xf, r1) 14:59:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) [ 403.115925][T18893] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 403.147528][T18890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:42 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsu\x00', 0x40000, 0x0) 14:59:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:42 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x17, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 14:59:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) [ 403.534661][T18890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:42 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0xc}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 14:59:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891b, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x890d, 0x0) 14:59:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x40) [ 403.672671][T18921] netlink: 'syz-executor.0': attribute type 49 has an invalid length. 14:59:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 14:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 14:59:42 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x1a, 0x0, 0x0) 14:59:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5401, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) [ 403.714678][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.782783][T18923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.804758][T18928] netlink: 'syz-executor.0': attribute type 49 has an invalid length. 14:59:42 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/4096) 14:59:42 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) [ 403.856394][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 404.123142][T18923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:43 executing program 2: request_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffb) 14:59:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80108906, 0x0) 14:59:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 14:59:43 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vcsu\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) 14:59:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) 14:59:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback, {[@cipso={0x86, 0x6}]}}}}}) 14:59:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000080)=@raw=[@func], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000200)) 14:59:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 404.356864][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x21}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x2000, 0x5, 0x0, 0x1, 0x0, [0x2]}, 0x40) 14:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 404.526453][ T34] audit: type=1326 audit(1606057183.337:77): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f59549 code=0x7fc00000 [ 404.624838][ T34] audit: type=1326 audit(1606057183.377:78): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f59549 code=0x7fc00000 14:59:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@raw=[@ldst={0x4}, @call, @jmp], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x9c, &(0x7f0000000180)=""/156, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 2: syz_open_procfs$namespace(0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) [ 404.711002][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.781883][ T34] audit: type=1326 audit(1606057183.377:79): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f59549 code=0x7fc00000 14:59:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x8}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 404.850743][ T34] audit: type=1326 audit(1606057183.377:80): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f59549 code=0x7fc00000 [ 404.936334][T18976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.054542][ T34] audit: type=1326 audit(1606057183.867:81): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f59549 code=0x7fc00000 14:59:43 executing program 5: r0 = epoll_create(0x6) write$FUSE_BMAP(r0, 0x0, 0x0) 14:59:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 14:59:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 405.097900][ T34] audit: type=1326 audit(1606057183.887:82): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18943 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f59549 code=0x7fc00000 14:59:44 executing program 1: request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) 14:59:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8901, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x541b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', 0x0}) 14:59:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5457, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) [ 405.278890][T18976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:44 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x9}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @loopback}}}, 0x88) 14:59:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x560b, 0x0) 14:59:44 executing program 1: socket(0x10, 0x3, 0x3) [ 405.499483][T19002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:44 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, [0x3]}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001b40), &(0x7f0000001b80)) 14:59:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) io_setup(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) 14:59:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x2b, 0x0, 0x1}, 0x40) 14:59:44 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) 14:59:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 14:59:44 executing program 1: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000002c0)) [ 405.825278][T19002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:44 executing program 1: add_key(&(0x7f0000002340)='asymmetric\x00', 0x0, &(0x7f00000023c0)="9f", 0x1, 0xfffffffffffffffb) 14:59:44 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0xe}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:44 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x6, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 14:59:44 executing program 5: clock_settime(0x0, &(0x7f0000001780)={0x77359400}) 14:59:44 executing program 0: keyctl$reject(0x13, 0x0, 0x0, 0x100000001, 0xfffffffffffffffc) 14:59:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x40) [ 406.077838][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x2, &(0x7f0000000040)={0x0, @nfc, @generic={0x0, "e90fddcd7a0ef67f6332b3cc173d"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}}) 14:59:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) io_setup(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) 14:59:44 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x17, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 14:59:44 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x1e, 0x0, 0x0) 14:59:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:45 executing program 1: r0 = epoll_create(0x6) read$FUSE(r0, 0x0, 0x0) 14:59:45 executing program 5: msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) [ 406.433680][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0xf}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4828000}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={0x0}}, 0x0) 14:59:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f00000026c0)) 14:59:45 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) 14:59:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0xf, r1) 14:59:45 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) 14:59:45 executing program 2: keyctl$revoke(0x7, 0x0) 14:59:45 executing program 5: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) 14:59:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x32, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 406.669933][T19073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1a}, 0x40) 14:59:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:59:45 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x21, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) 14:59:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x11}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:45 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000200)={0x0, ""/16}, 0x18, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) 14:59:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8916, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:45 executing program 5: r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000080), 0x2) 14:59:45 executing program 1: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)='o', 0x1) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) 14:59:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x38, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) [ 407.028199][T19073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x8, 0x0, 0x0) 14:59:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x40) 14:59:46 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200047ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0x8204, 0x20c49a, 0x0, 0x27) 14:59:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) 14:59:46 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x23, 0x0, 0x0) [ 407.220339][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:46 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, 0xffffffffffffffff, 0x25}, 0x10) bpf$ITER_CREATE(0xf, &(0x7f0000000100)={r1, 0x10}, 0x8) [ 407.503744][ T34] audit: type=1326 audit(1606057186.317:83): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fe0549 code=0x7ff00000 [ 407.566096][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.606531][ T34] audit: type=1326 audit(1606057186.317:84): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe0549 code=0x7ff00000 14:59:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x12}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:46 executing program 2: io_uring_setup(0x5f04, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}) 14:59:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x40) 14:59:46 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d1a4}, 0x78) 14:59:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 407.709064][ T34] audit: type=1326 audit(1606057186.317:85): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe0549 code=0x7ff00000 14:59:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, r0) 14:59:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0xd, 0x5, 0x0, 0x1}, 0x40) 14:59:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={0x0}}, 0x0) [ 407.797879][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:46 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000010c0)={&(0x7f0000001000), 0xc, &(0x7f0000001080)={0x0}}, 0x0) [ 407.828093][ T34] audit: type=1326 audit(1606057186.317:86): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fe0549 code=0x7ff00000 [ 408.180546][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000580), 0x4) 14:59:47 executing program 1: r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000080), 0x1) 14:59:47 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 14:59:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x0, 0x0, 0x10001, 0x0, 0x1}, 0x40) 14:59:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3}, 0x40) 14:59:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x13}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:47 executing program 5: add_key(&(0x7f0000002340)='asymmetric\x00', 0x0, &(0x7f00000023c0)="9f33", 0x2, 0xfffffffffffffffb) [ 408.355059][T19152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:47 executing program 4: r0 = io_uring_setup(0x5f04, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, 0x0, 0x1) 14:59:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x8, &(0x7f0000000080)=@raw=[@func, @map, @btf_id, @map_val, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:59:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x48, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x6, r1) 14:59:47 executing program 0: pipe2$9p(0x0, 0x4400) 14:59:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfeffffff}]}) 14:59:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x4) 14:59:47 executing program 1: timer_create(0x7, &(0x7f0000000080)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 14:59:47 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000280)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) [ 408.709665][T19152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:47 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400)='/dev/full\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x78) [ 408.777630][ T34] audit: type=1326 audit(1606057187.587:87): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=19168 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fe0549 code=0xfeff0000 14:59:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x14}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89b0, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:47 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) getegid() poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 14:59:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000300)=@ipv6_getnetconf={0x14, 0x52, 0x801}, 0x14}}, 0x0) 14:59:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:59:47 executing program 5: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}) 14:59:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 409.003805][T19190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 14:59:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8983, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:48 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002680)='/dev/loop-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 14:59:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x22, 0x0, 0x0) 14:59:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f00000001c0)={'gre0\x00', 0x0}) [ 409.421749][T19190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:48 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x14241, 0x0) 14:59:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8942, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:48 executing program 4: io_uring_setup(0x5f1f, &(0x7f00000003c0)) 14:59:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) poll(0x0, 0x0, 0x204) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={r1}, 0x0, 0x0) 14:59:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7}, 0x4) 14:59:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1600bd81, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000001600)=""/70, &(0x7f0000001680)=0x46) [ 409.671497][T19223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:59:48 executing program 4: sysinfo(&(0x7f0000000000)=""/147) 14:59:48 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000005200)='/proc/thread-self\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) [ 410.015711][T19223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x16}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:59:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) 14:59:49 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0x4, 0x0, 0x0) [ 410.239177][T19247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:49 executing program 1: keyctl$revoke(0x11, 0x0) 14:59:49 executing program 5: request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/zero\x00', 0xfffffffffffffff9) 14:59:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) 14:59:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) 14:59:49 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x4a400, 0x0) [ 410.578377][T19247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:59:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) 14:59:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8990, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}) 14:59:49 executing program 1: io_uring_setup(0x6a1b, &(0x7f0000000000)={0x0, 0x0, 0x2}) 14:59:49 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x17}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1600bd81, 0x0, 0x0) 14:59:49 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x40a400, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000016c0)='batadv\x00') [ 410.927972][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)=@secondary='builtin_and_secondary_trusted\x00') 14:59:49 executing program 0: bpf$MAP_CREATE(0x12, &(0x7f0000000000), 0x40) 14:59:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) 14:59:49 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 14:59:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 411.282122][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:59:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x5, r1) 14:59:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x21, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:51 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5460, 0x0) 14:59:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 14:59:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x18}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:51 executing program 1: bpf$MAP_CREATE(0x8, &(0x7f0000000000), 0x40) [ 412.286715][T19311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:51 executing program 4: clock_settime(0x0, &(0x7f0000000040)={0x0, 0x989680}) 14:59:51 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x4c, 0x13, 0x1}, 0x4c}}, 0x0) 14:59:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) futex(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0) 14:59:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote}, 0x20) 14:59:51 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000080)={'gre0\x00', 0x0}) [ 412.650517][T19311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x10}, 0x10}}, 0x0) 14:59:52 executing program 5: syz_io_uring_setup(0x2971, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 14:59:52 executing program 1: unshare(0xc020000) 14:59:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x130a) 14:59:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x19}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x1, [{}, {}, {}]}, 0x58) [ 413.779832][T19349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:52 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x1d, 0x0, 0x0) 14:59:52 executing program 1: request_key(&(0x7f0000000180)='big_key\x00', 0x0, 0x0, 0xfffffffffffffffb) 14:59:52 executing program 0: msgsnd(0x0, &(0x7f0000000140)={0x1, "36529549c681f2b4242d769a025a03fccc0dadd010a3df5e1ff1695aee1f0d99b9c9148aeb2322ae15f8455d4e2aacdf5d823468c16aee73f596630c1113fca48821fb44b48c4c60ec1229575d3e7688289ea28b496b983c261606cbecf3fd463cfdcff20cd3112ae0c6804eb481c9310344ee3716a72b1d47f4670b5e394e0fdafd548cc9174e7d19ca839f3ca0a076956515167db164e6564069fed6f6e614caab89bd270a61f16fc3cfdee9dc3c9f507fb0e7872359ddd4ea19d5e4f5c5710d808c6dcc9119949787c982c8a723cbd92560ff7e42d3c5e05f151d20b5384f1a0dbe339a40601fe0e8cf6d7860773f49477b8f122c5e069d598fdc73c1121adf1b528167476025748c1bfa8f145d052c01c98ae4cd441b8fc2b8f8eaf2cc5b267b02a987b1f38b04e71d1356d6902ce131fbe517613d1b13ec4646d2f686e04ff2bfc9f5219b03e3f5ffd099de00272250a3beefe52ab62a29e19da84fd1b287efad35c1aa481b18cad2e4ef5e2160bf0b8915043eed37b73baa27b1ad86ea9dc5b6d541084b46a220f7d359147a9861257c7acfa69124ebc6d6e5c3000f0b8c6df6fb700af201e58563c3a934beb0ef4d6c143e4faf2305fe2ef7d81bf6707b129ce30acdd4f75b09bac97422d4d22bcd09cd421a5b24f04b571f98e5ac2e4edc2f04659d3ca7af5bd7847e6b0c6ffe5cc17d4765fa5f422252203cad8bfbc6fa2dfba47fe549a8da55dcfdc879c9dd81d3a0cc36b64eccc9ce7378543ecb1b0a85b3287d105761952d5d0217da46356bc0fd75d44135ada9e87bd6dd52164fdf62dbf59d059696967ff642e6eb93c74501ef6dbdac4ff35e50c3f93e8a3679b79a6a40e2994fe3a0c3e3f8ab4b9ec035bfbed9a108680c8125c004fcf7da29d395743827ed0230fd99f8515d8de46dd22e77402f7c41dc052d09e655b802ba5d6930061c077d37151d34243a8838a92ff93f6608471918ec514fb6a77afaaebf3f79e750798fe9854de278a24cf9b56a49b38b35eb1cebc3141802c331aecf805ad3e4919874ef74eb93bf385b429364f3acb5c98492e71959ae7b657fd61b871ae988a8566a2312003bfc794ddc7a76e1b41efe5cba33c1af3ad2c239874a69eea031e6ca4ed6964b961b9b1f17f17c0a04f5fc43f0b777b24d133b67f553f49f5b3ed5f4221e7c1661dc4e1d9c5dca6f750754a4a3f02673f2b85501caae1ac76837cee221db0e58e0d85743b63843417e3785fd29119b98aed6c5067219c2de466fcc2d0d4f2a947c979529d80c25b9add5754201ee76446befd83dddd62d9c2399dc336037dbd5c6e7e77cda535e1c591530d231a618b3c683f5ec10275664bbe9af235fe4ead040add7073a0637d443b8d58731ca94adfe90ff8deabf6b408abbd77c8d3de3966d2d7c5c93d34bfa297a76b5843bc559af94cf44e8b08a5f63b7a8cb69184bdc03e239166f23879c583837cc5c69510ad957f2eac8ee175aeb81f3f6b7c3ee8a245ca6956554543731bb8c0bbb9a2eb5e37cc8ca6ef420816fa131a3f34c8ffc31b81faa66511572e6c038343745709c530e674ae3978ac614f4ed9d4c7d460370bb321ede4c82ba949eee1cafeaa982d03416235fc0bdf66afc48dd5fbe3ff99bc6b10b3cdedac0541bb102dab638a56b59eaab78b86f00af4bdb0cd8976d6d8652da6c0522d81c0ae1462b26be879fcf04721ef692edc85d3baf7fb5d26afcab71cf93ac45e6153e5cf21730e009abd53da5b2310e9bab0d6aa5d7b72f638cff5c1de3fabceee380ba381959936aec7cc3e67f16f13c7c014682f3ed9a59f97ee91c07ee17aacac66bfec1e356699b92aa5d34c42e620084a8b2c7b6e1b733837ca4ec9f3337cbe6216c0fe17ad8078de78e5465e5af281bc25401fa2f85c1751cd70b5ed2e7cd373926c38b0ca63d779638f6c5ee6bfefa8e17a3574946ac99cc5b43c459783fe41250a8d10d2c80d533f4b969483a23ec7a693cf34535409d6c542e14dccbc1ec66403994d6718d0cd62da65f307d36fe2910d42056cd9982ba7686084327e40804ef7efdff0b6025db53a51b1fe94054d8c3670635166877274828563ad46b00e339d991516b18d2717841ad6f242d850a8a00665a7586436a667dbf57c8498183aca7c62e73cf7bd799faba2759117c5cee9850346931d46340c1d2750e96923118b49a064d1f7d73d62c2e457c65b4758f5da5ce26aa496ab2973afb03a6b95930e3914a8fb5c482098eac0b73c287bd9efa4cc51046340a432227b1dfd9a29178d83dc08935564461c0bbe9324b84df0590dbd7e8a91fb1ada7194d8ac436325b730ca95420048cb62432dcb464c0d708076cbf9851dd7bc85a0ebd7f6bde788624d621fa19bc6637c222345d3b631d0a338524d2a2462c8194f874a264f7375e471991f320a8e9045a1d93093bd8f6a23bfb43027b1b58fa32f19ed97dde42f57251b0b8e79d8e4aa7e913313f6848c09897d14a06df837db52088307849360d64b79e00e1e02d15de352f5878945c8f853f349bf92256439f1c924463f3c2881556d8d4393646813754bf3d6bd242b1cd860402f9914c078372155abac2a68cc03eaf79fce7ee1de4a6d6a710105f31e812f4d68e11e166044b9aeff47dbfd6f78db7b28d091b8a5a13642de01f2585657297ba071e724b4fd765b3f8b683a1e8e645727b547ce571d67c4e0f6de8f91155c3dcd79ca879565869a89a862de7ea8244c625386bcf2d3fbde69b2e327a81535ce36f36947195940902957489e1963f2b614a397e22478263729df30edbb691603e8ded042dc9b396d2ee4e289e734828c4d7ae1011637b2bc1c5f8487fe8b887f05653f1bc5e84b4d41da5a881556f095e57dd0c2adde69dbe2fa2590b2ebb8438829b57b41e225d13607c83db8c844a95c1d575fb5fbe06d3983bb62a8e4a6d404c607e6fd871282b3d4e0b1b431ff11dd56a0a8eb4f39643dfc54ca6f31ab436bd674e6cdd3b6e202993bd06f71686c45166abdc202ba4ac6c516b57262cf6e886f149dc5cd022fabf1237d9206bc0b7387af59f7a9454cb676e46e146b70defbce60614206dd92207689dcc8a5be479a059a6362562cb2c2f58252734b0938afb307c8df7df1f97882da60bb842dc9139b397552c7fc7548774791abd6d28d581fbe6263c940d28a9cf4e82e75fe5804219a42860a668fb93c657300a33e07aa152776b1f21fb97a03e7e6c5509b2a1adbc8bb3de93e1ef383bb0dc077942aca4845fa122518802b56701a125bfafa5e06ca0b1d2b12b99ec561ebed7d086c5b119cfa8edfd9883b2db30297b3f0354dedaaa2659eba26794850fa4b31469f8fc59e8c0ae3c230e8d16d2b05d921a9516ea7d2ca10c93e7b4852343452cb280e6a8aa4af8b36f079f2fd980aeff002f1fcd7380301c0d8ecd01c4055f246eb9498482791190ee0e8d0efb061ff63109d7ab03eabaf715ea33669a85df7f31738b82c0aa82c051c0a9ef2e1cb5eb62209416bad7a15b0c00b7adb20b7d4ffde4b0acffe62c9232c00b0a15620002e0a329fee158fcb9e31c9592c95fd8ab3cbd1deb92fa80ca4e0382c0ad42b34ffa06b30d22a5abdd0796c6d2b900c0b2ed22d7422e2148e8957664c11d461b32db8ce523a6a62386c426f5c442b73285fe3c92e49a696569841ae715f59207ff945e74c22b332419be5e7cfa5a19e1032f5aa7cf9608aa0ec0c00d3c076413bc73c1d50983c5a64bfb52b1e621006be2ca9d316d9f9b4fff20f4633861b0c88fc174555ca30909ff860843565967cb1b3f4d8f9d3d4bf259484bddd81d0724514243245312366ca8d4ced4dab4ee21d32cee712517e02629173e7ef06c919c654383d9375ee0d6266dbd1115475549abd4e812def317a8c456cc13ee86d2773e07355ea64b797a815e992e52eb5c190ef29c892f1202c6d6dbea85335e53babd25dd16c421b85d4cf67d5ba7e8e1f246daf6362f9b1a84cb7590c36ddd71429d4326d66e975aa0103d1debdedcdab444085d87cc49e33b31ae6df543462a1718064156360dfa0fcd6517e03f46ffc6e87a36b1eb2d4b551fb15e9dfb67af2394a4dd163383759c8cfef8fcbd190ede5568174534aba5162e4eb1b9b28846c01b87ab09d21e714d7b980c4b82f738804f55738e25049006a28338e37480d5a6cf6f1e273ac4973795c1dcd1ec7dd01c8e493f9c0c13c07390b761e4a78b12813c6943d9ee52b8edb910ccc4a134b2be4ee52a2b83825794462e0dedea95f55549dbf3b6855f2433b55224ced7f4e6f7e5f750b9e01f5d09698feca729590b524a17ca488d1acdf9dbc00f501fb93dd3ec30b060d76ea379af0ca06d8ac49dcd54676e0df1073d7590cb2c3e76785bc13f81f4d2d554c4edd2d049270140dcdd94e7315b6925459c1e4d44ffbea21ed554d5242ce8318ec45ed0e7d88d81f94ec0ee2d43d391d8285db6773156fb286210b77c204454cc5e310363ba19043541bae24e3aecdbce2bdb554375fc6abbccbf571990a33b84dbd1957f214014fe3815adca35b95929a9c500ff333d8d61d8d62917eebe436fa5f756cf19d851908c8f501f491fd1ba0c6fe2684806a8f7f44cd99bb07889a1b70dae74042552fc427fc23a86cf8d8b561b4e71634652611194966b91f3d0517e7c012ffcebdf18383a281ca4cc178b06dd3764c65c187adf7f3989f05f6d40f7111a3e00bdb155a217700ae8beb745cae66d1eb5b4e00d49a13c794c0008af01cc5ddf1ac449f099c874e09a1e4ecf454b6cff9c135d5aead03171616e6beb1b7808d3785e125ddbfb32ece84da18edbbadc2c8fc16f734029b6255ddfee15a49ded7ae40fc83dc5a5368deab79ff4dd9c4fef4196f4b8794917691b84d01600da494a86bc2681d3d300ad4f9d9e4b5140e975bf6840dae7b24b5eb56304ae485a249dfa9aedb0f67db4404a7233dffca4f0528d32e72fe6f5a79554f4c5e8e95a209c1bd04c68127bf7e36dcfead71c5019f9f7fb5ed24b97f250608b60942dda5332e6e31bf93081b3bea5558a07e74058d21c7abbfca7827ac528b88d8b1bbd3f1c0b516e99b748c2127743185afa08dddee0346f6fa488419b8d6a164c8bf8f45a094ba935572595f3feab253c6553f02bb70fab41d591192ec1b97b5838d5371428f51eb0a5029a79fe7c3b64c7dc8759f2319ce5490cac92c357f11a3de85a49b6535f3cc7a797c416641c64a66fca2bf05d6b8a7d479a09623f7c8dc7ade676f08273d14d617b73d241c96c354d1f490929dbfcd6a9f72c96802c62a92227c10340618f9bd5df8e32473c2d0bfed256f4f6c24fc0adf9d4859f3e9211ff07aa6c916728eac844e2822fc3f1c43e9e9698858b192769948787a953c5a8b2d03b3a0bfa96e7f961280ab9b409592ed986707345f4d05998a17ce9c530ff3d0f71ab6d0b488cf7a2c3e5fa729afafe268722b34963e591e4738a00e5d068a97de2043230b1ef66c2c76b1af66d67da6a58a05bacbacaee9026e6cffda3b86783ed179728e47cfeadbdfbd9458236703afe714170fe30de8b8bd86cbc3376e11a8716a4873ffdb91694517b9cbb01ab0610fd9660a8de0421e4c51e141d30034fe5f03a4d0553f2283427b10ec2d933ac828a4ddd5ea17ed2dce13e2ce5e53d2197a71c86b7f70896e079370f071d864eb68372b3a1b852fb"}, 0xfd1, 0x0) 14:59:52 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 14:59:52 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 14:59:52 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) 14:59:52 executing program 1: socket(0x2, 0x0, 0x10000) 14:59:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="3f31d1c98b943cbaaf648e00b05cb951", 0x10) 14:59:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 14:59:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 414.134185][T19349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1a}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:53 executing program 1: r0 = socket(0x29, 0x0, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x10c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x951}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 14:59:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28}, {0x6}]}) 14:59:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f00000001c0)={'gre0\x00', 0x0}) 14:59:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) setreuid(0x0, 0x0) io_setup(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) dup2(r5, r4) 14:59:53 executing program 2: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0), 0x10) [ 414.397958][T19388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x2000, 0x5, 0x8, 0x1}, 0x40) 14:59:53 executing program 4: waitid(0x0, 0x0, 0x0, 0xe0000004, 0x0) 14:59:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8937, &(0x7f0000000080)={'tunl0\x00', 0x0}) 14:59:53 executing program 0: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 14:59:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x35, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) 14:59:53 executing program 1: r0 = socket(0x29, 0x0, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x10c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x951}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 414.762147][T19388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1b}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x7, r1) 14:59:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5412, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "b886af45e6ce0e52"}) 14:59:53 executing program 0: 14:59:53 executing program 5: 14:59:53 executing program 1: r0 = socket(0x29, 0x0, 0x1) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x10c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x951}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 14:59:53 executing program 0: 14:59:53 executing program 5: 14:59:53 executing program 4: [ 414.983417][T19431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:53 executing program 2: 14:59:53 executing program 0: 14:59:54 executing program 4: 14:59:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:54 executing program 5: 14:59:54 executing program 1: 14:59:54 executing program 2: 14:59:54 executing program 0: 14:59:54 executing program 4: [ 415.358657][T19431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:54 executing program 5: 14:59:54 executing program 0: 14:59:54 executing program 2: 14:59:54 executing program 4: 14:59:54 executing program 1: [ 415.521215][T19450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:54 executing program 5: 14:59:54 executing program 2: 14:59:54 executing program 1: 14:59:54 executing program 0: 14:59:54 executing program 4: 14:59:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:54 executing program 5: [ 415.882923][T19450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:54 executing program 0: 14:59:54 executing program 2: 14:59:54 executing program 1: 14:59:54 executing program 5: 14:59:54 executing program 4: [ 416.045730][T19467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:54 executing program 2: 14:59:55 executing program 5: 14:59:55 executing program 0: 14:59:55 executing program 4: 14:59:55 executing program 1: [ 416.381741][T19467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:55 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1e}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:55 executing program 2: 14:59:55 executing program 4: 14:59:55 executing program 0: socket(0x0, 0x43ca712bf0e27d23, 0x0) 14:59:55 executing program 5: 14:59:55 executing program 1: 14:59:55 executing program 2: 14:59:55 executing program 5: 14:59:55 executing program 1: 14:59:55 executing program 0: 14:59:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000040)=@generic={0x0, "5f7308f336cfadfdc8d13339c30eaedc9ea7f77b55d5ae3147f843d051cc941e8d3c1a5c38ae36ed2484ba583a390c399917a99265bd39cd72284d9daf63ad8294e37d5c7e3761f30c1cf7d7b91599a8dc46288062f2f454daaa716ea0c20196f11ca20cd0d3973140729271d612554a4f2b9bb75a08f80836349ad671e7"}, 0x80) [ 416.593427][T19487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:55 executing program 0: 14:59:55 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x21}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:55 executing program 2: 14:59:55 executing program 1: 14:59:55 executing program 5: 14:59:55 executing program 4: 14:59:55 executing program 0: [ 416.929845][T19487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:55 executing program 2: 14:59:55 executing program 1: 14:59:55 executing program 0: 14:59:55 executing program 4: 14:59:55 executing program 5: [ 417.082301][T19506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:56 executing program 0: [ 417.479038][T19506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x22}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:56 executing program 2: 14:59:56 executing program 4: 14:59:56 executing program 1: 14:59:56 executing program 5: 14:59:56 executing program 0: 14:59:56 executing program 2: 14:59:56 executing program 4: 14:59:56 executing program 0: 14:59:56 executing program 5: 14:59:56 executing program 1: [ 417.759493][T19521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:56 executing program 4: 14:59:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x23}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:56 executing program 2: 14:59:56 executing program 1: 14:59:56 executing program 5: 14:59:56 executing program 0: 14:59:56 executing program 4: [ 418.121872][T19521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:57 executing program 2: 14:59:57 executing program 1: 14:59:57 executing program 0: 14:59:57 executing program 4: 14:59:57 executing program 5: [ 418.323072][T19537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:57 executing program 4: [ 418.647632][T19537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x24}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:57 executing program 2: 14:59:57 executing program 5: 14:59:57 executing program 0: 14:59:57 executing program 1: 14:59:57 executing program 4: 14:59:57 executing program 0: 14:59:57 executing program 4: 14:59:57 executing program 1: 14:59:57 executing program 2: [ 418.854358][T19554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:57 executing program 5: 14:59:57 executing program 0: [ 419.219978][T19554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x25}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:58 executing program 1: 14:59:58 executing program 4: 14:59:58 executing program 2: 14:59:58 executing program 5: 14:59:58 executing program 0: 14:59:58 executing program 5: 14:59:58 executing program 0: 14:59:58 executing program 4: 14:59:58 executing program 1: 14:59:58 executing program 2: [ 419.461148][T19573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:58 executing program 5: 14:59:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x26}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:58 executing program 2: 14:59:58 executing program 0: 14:59:58 executing program 1: 14:59:58 executing program 4: 14:59:58 executing program 5: [ 419.832551][T19573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:58 executing program 0: 14:59:58 executing program 1: 14:59:58 executing program 2: 14:59:58 executing program 4: 14:59:58 executing program 5: [ 420.000282][T19590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:58 executing program 1: [ 420.341186][T19590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x27}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:59 executing program 0: 14:59:59 executing program 5: 14:59:59 executing program 1: 14:59:59 executing program 4: 14:59:59 executing program 2: 14:59:59 executing program 2: 14:59:59 executing program 4: 14:59:59 executing program 0: 14:59:59 executing program 1: 14:59:59 executing program 5: [ 420.561932][T19607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:59 executing program 4: [ 420.904792][T19607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:59:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x48}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 14:59:59 executing program 0: 14:59:59 executing program 2: 14:59:59 executing program 1: 14:59:59 executing program 5: 14:59:59 executing program 4: 14:59:59 executing program 0: 14:59:59 executing program 4: 14:59:59 executing program 1: 14:59:59 executing program 2: 14:59:59 executing program 5: [ 421.130174][T19628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:00 executing program 5: 15:00:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x4c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:00 executing program 1: 15:00:00 executing program 4: 15:00:00 executing program 0: 15:00:00 executing program 2: 15:00:00 executing program 5: [ 421.469018][T19628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:00 executing program 4: 15:00:00 executing program 5: 15:00:00 executing program 0: 15:00:00 executing program 2: 15:00:00 executing program 1: [ 421.667536][T19645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:00 executing program 0: 15:00:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x60}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:00 executing program 5: 15:00:00 executing program 4: 15:00:00 executing program 1: 15:00:00 executing program 2: 15:00:00 executing program 0: [ 422.046184][T19645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:01 executing program 2: 15:00:01 executing program 1: 15:00:01 executing program 5: 15:00:01 executing program 0: 15:00:01 executing program 4: [ 422.234509][T19662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:01 executing program 2: 15:00:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x68}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:01 executing program 1: 15:00:01 executing program 5: 15:00:01 executing program 0: 15:00:01 executing program 4: 15:00:01 executing program 2: [ 422.585392][T19662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:01 executing program 1: 15:00:01 executing program 0: 15:00:01 executing program 5: 15:00:01 executing program 4: 15:00:01 executing program 2: [ 422.757068][T19679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:01 executing program 1: 15:00:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x6c}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:01 executing program 0: 15:00:01 executing program 5: 15:00:01 executing program 2: 15:00:01 executing program 4: 15:00:01 executing program 1: [ 423.110356][T19679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:02 executing program 2: 15:00:02 executing program 1: 15:00:02 executing program 4: 15:00:02 executing program 0: 15:00:02 executing program 5: [ 423.336019][T19695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:02 executing program 0: [ 423.703804][T19695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:02 executing program 4: 15:00:02 executing program 2: 15:00:02 executing program 1: 15:00:02 executing program 5: 15:00:02 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x74}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:02 executing program 0: 15:00:02 executing program 4: 15:00:02 executing program 2: 15:00:02 executing program 5: [ 423.831025][T19713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:02 executing program 1: 15:00:02 executing program 0: 15:00:02 executing program 4: 15:00:02 executing program 2: 15:00:02 executing program 0: 15:00:02 executing program 5: 15:00:02 executing program 1: [ 424.155308][T19713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x7a}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:03 executing program 4: 15:00:03 executing program 5: 15:00:03 executing program 2: 15:00:03 executing program 0: 15:00:03 executing program 1: 15:00:03 executing program 5: 15:00:03 executing program 4: 15:00:03 executing program 2: 15:00:03 executing program 0: [ 424.393221][T19731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:03 executing program 1: 15:00:03 executing program 4: [ 424.740689][T19731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x0}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:03 executing program 5: 15:00:03 executing program 2: 15:00:03 executing program 0: 15:00:03 executing program 4: 15:00:03 executing program 1: 15:00:03 executing program 0: 15:00:03 executing program 4: 15:00:03 executing program 1: 15:00:03 executing program 2: 15:00:03 executing program 5: [ 424.907060][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:03 executing program 0: [ 425.283316][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:04 executing program 2: 15:00:04 executing program 1: 15:00:04 executing program 5: 15:00:04 executing program 4: 15:00:04 executing program 0: 15:00:04 executing program 2: 15:00:04 executing program 4: 15:00:04 executing program 1: 15:00:04 executing program 0: 15:00:04 executing program 5: [ 425.518499][T19769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:04 executing program 2: [ 425.876681][T19769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:04 executing program 4: 15:00:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:04 executing program 2: 15:00:04 executing program 1: 15:00:04 executing program 0: 15:00:04 executing program 5: 15:00:04 executing program 4: 15:00:04 executing program 0: 15:00:04 executing program 5: 15:00:04 executing program 2: 15:00:04 executing program 1: [ 426.096398][T19784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:05 executing program 1: 15:00:05 executing program 2: [ 426.458007][T19784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:05 executing program 4: 15:00:05 executing program 0: 15:00:05 executing program 5: 15:00:05 executing program 1: 15:00:05 executing program 2: 15:00:05 executing program 4: 15:00:05 executing program 1: 15:00:05 executing program 5: 15:00:05 executing program 0: 15:00:05 executing program 2: [ 426.692197][T19801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:05 executing program 5: [ 427.039710][T19801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:05 executing program 0: 15:00:05 executing program 1: 15:00:05 executing program 4: 15:00:05 executing program 2: 15:00:05 executing program 5: 15:00:06 executing program 2: 15:00:06 executing program 0: 15:00:06 executing program 4: 15:00:06 executing program 1: 15:00:06 executing program 2: [ 427.408785][T19823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:06 executing program 1: 15:00:06 executing program 5: 15:00:06 executing program 4: 15:00:06 executing program 0: 15:00:06 executing program 2: 15:00:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:06 executing program 1: [ 427.765619][T19823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:06 executing program 1: 15:00:06 executing program 4: 15:00:06 executing program 5: 15:00:06 executing program 2: [ 427.932156][T19837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:06 executing program 0: 15:00:06 executing program 1: 15:00:06 executing program 4: 15:00:06 executing program 2: 15:00:06 executing program 0: 15:00:06 executing program 5: [ 428.266514][T19837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:07 executing program 1: 15:00:07 executing program 4: 15:00:07 executing program 5: 15:00:07 executing program 2: 15:00:07 executing program 0: 15:00:07 executing program 0: 15:00:07 executing program 4: 15:00:07 executing program 1: 15:00:07 executing program 5: 15:00:07 executing program 2: [ 428.490304][T19856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:07 executing program 0: 15:00:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x8}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:07 executing program 2: 15:00:07 executing program 1: 15:00:07 executing program 4: 15:00:07 executing program 5: 15:00:07 executing program 0: [ 428.836750][T19856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:07 executing program 0: 15:00:07 executing program 4: 15:00:07 executing program 1: [ 428.975459][T19873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:07 executing program 5: 15:00:07 executing program 2: 15:00:08 executing program 1: [ 429.326929][T19873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:08 executing program 5: 15:00:08 executing program 4: 15:00:08 executing program 0: 15:00:08 executing program 2: 15:00:08 executing program 1: 15:00:08 executing program 5: 15:00:08 executing program 0: 15:00:08 executing program 2: 15:00:08 executing program 4: 15:00:08 executing program 1: [ 429.524859][T19889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:08 executing program 5: [ 429.863420][T19889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xa}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:08 executing program 0: 15:00:08 executing program 2: 15:00:08 executing program 4: 15:00:08 executing program 1: 15:00:08 executing program 5: 15:00:08 executing program 1: 15:00:08 executing program 5: 15:00:08 executing program 2: 15:00:08 executing program 0: 15:00:08 executing program 4: [ 430.079937][T19906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:09 executing program 5: [ 430.427346][T19906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xb}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:09 executing program 1: 15:00:09 executing program 2: 15:00:09 executing program 4: 15:00:09 executing program 0: 15:00:09 executing program 5: 15:00:09 executing program 2: 15:00:09 executing program 5: 15:00:09 executing program 1: 15:00:09 executing program 4: 15:00:09 executing program 0: [ 430.661054][T19923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:09 executing program 2: [ 431.012439][T19923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xc}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:09 executing program 0: 15:00:09 executing program 1: 15:00:09 executing program 5: 15:00:09 executing program 4: 15:00:09 executing program 2: 15:00:10 executing program 4: 15:00:10 executing program 5: [ 431.163291][T19940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:10 executing program 2: 15:00:10 executing program 1: 15:00:10 executing program 0: 15:00:10 executing program 2: 15:00:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xd}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:10 executing program 0: 15:00:10 executing program 5: 15:00:10 executing program 4: 15:00:10 executing program 1: 15:00:10 executing program 2: [ 431.500871][T19940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:10 executing program 5: 15:00:10 executing program 0: 15:00:10 executing program 1: 15:00:10 executing program 2: 15:00:10 executing program 4: [ 431.704996][T19955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:10 executing program 5: [ 432.062853][T19955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xe}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:10 executing program 2: 15:00:10 executing program 1: 15:00:10 executing program 0: 15:00:10 executing program 4: 15:00:10 executing program 5: 15:00:11 executing program 4: 15:00:11 executing program 1: 15:00:11 executing program 0: 15:00:11 executing program 5: 15:00:11 executing program 2: [ 432.257217][T19973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:11 executing program 4: [ 432.615674][T19973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xf}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:11 executing program 1: 15:00:11 executing program 2: 15:00:11 executing program 0: 15:00:11 executing program 5: 15:00:11 executing program 4: 15:00:11 executing program 5: 15:00:11 executing program 0: 15:00:11 executing program 4: 15:00:11 executing program 1: [ 432.795403][T19990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:11 executing program 2: 15:00:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="08010000160013b40968ce95cdb9c24e1dae79d7e97f4ec42439e66f75e010cdb78336aa1db95efb64a5a9b5d40f40915cc7124fa76124559331026993b09038d0d29e802cdbc6f8767c019195556635501e95f7438eaf4769bc9dc632"], 0x108}}, 0x0) [ 433.049728][T19998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:00:11 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, 0x0) 15:00:11 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x800000000009032, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) pread64(r0, 0x0, 0xfffffffffffffe19, 0xfffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:00:11 executing program 4: openat$hwrng(0xffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x1, 0x0) 15:00:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7c) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x94, 0x4, "d102"}]}}}], 0x10}, 0x800) 15:00:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x10}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:11 executing program 0: r0 = openat$autofs(0xffffff9c, &(0x7f0000001500)='/dev/autofs\x00', 0x1c1382, 0x0) write$eventfd(r0, 0x0, 0x0) [ 433.122398][T19990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)) [ 433.248925][T20012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:12 executing program 0: r0 = openat$autofs(0xffffff9c, &(0x7f0000001500)='/dev/autofs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) 15:00:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0x2, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x30}}, 0x0) 15:00:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f00000005c0)="54f6a8609b5bb0fe4924ac4d9a8c", 0xe, 0x0, &(0x7f0000000600)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "56f6fc5693bd51ef5288e9d1a399cf1b25c2146a3059fefdcdd747ce16b3be43fa5929984216b1d040d1bbf95cd8496c364bc289ff11f15bf27a67e427fab3"}, 0x80) 15:00:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x8, 0x401}, 0xc) 15:00:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}}) 15:00:12 executing program 4: r0 = socket(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00'}) [ 433.606714][T20012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:12 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x800000000009032, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) pread64(r0, 0x0, 0xfffffffffffffe19, 0xfffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:00:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20102084dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:00:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7c) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x10}}], 0x10}, 0x0) 15:00:12 executing program 0: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, 0x0) 15:00:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000240), 0x4) 15:00:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @timestamp, @sack_perm, @mss], 0x4) 15:00:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000380)) 15:00:12 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000040)) 15:00:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x8}, 0xc) [ 433.979906][T20036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:12 executing program 2: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x161000) 15:00:13 executing program 0: openat$tun(0xffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x26000, 0x0) 15:00:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/37, 0x25}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000110005"], 0xc8}}, 0x0) 15:00:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0xfffffffffffffffe}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 434.863787][T20064] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.5'. [ 434.887732][T20064] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.5'. [ 435.375377][ T29] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.776134][ T29] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.024139][ T29] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.393022][ T29] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.822800][T20129] IPVS: ftp: loaded support on port[0] = 21 [ 438.836247][ T29] device hsr_slave_0 left promiscuous mode [ 438.843750][ T29] device hsr_slave_1 left promiscuous mode [ 438.851198][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.861945][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.869593][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.881846][ T29] device bridge_slave_1 left promiscuous mode [ 438.890079][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.903637][ T29] device bridge_slave_0 left promiscuous mode [ 438.909960][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.934489][ T29] device veth1_macvtap left promiscuous mode [ 438.941020][ T29] device veth0_macvtap left promiscuous mode [ 438.947034][ T29] device veth1_vlan left promiscuous mode [ 438.953316][ T29] device veth0_vlan left promiscuous mode [ 440.809109][ T9552] Bluetooth: hci3: command 0x0409 tx timeout [ 442.889101][ T9552] Bluetooth: hci3: command 0x041b tx timeout [ 443.530595][ T29] team0 (unregistering): Port device team_slave_1 removed [ 443.548130][ T29] team0 (unregistering): Port device team_slave_0 removed [ 443.564947][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.578686][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.645271][ T29] bond0 (unregistering): Released all slaves [ 443.901918][T20129] chnl_net:caif_netlink_parms(): no params data found [ 443.998436][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.008026][T20129] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.019277][T20129] device bridge_slave_0 entered promiscuous mode [ 444.028392][T20129] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.037915][T20129] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.047451][T20129] device bridge_slave_1 entered promiscuous mode [ 444.071195][T20129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.083847][T20129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.115813][T20129] team0: Port device team_slave_0 added [ 444.126953][T20129] team0: Port device team_slave_1 added [ 444.150307][T20129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.157301][T20129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.184570][T20129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.197542][T20129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.204582][T20129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.232179][T20129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.268812][T20129] device hsr_slave_0 entered promiscuous mode [ 444.275908][T20129] device hsr_slave_1 entered promiscuous mode [ 444.283669][T20129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.291411][T20129] Cannot create hsr debugfs directory [ 444.419871][T20129] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.427277][T20129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.435712][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.442895][T20129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.589338][T20129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.618094][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.628841][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.637864][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.656541][T20129] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.682480][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.693102][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.700279][ T9780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.721390][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.731505][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.739636][ T9780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.762649][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.792318][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.801669][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.810927][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.820388][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.829874][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.844390][T20129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.857460][T20129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.869378][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.878024][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.915471][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 444.924329][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 444.944779][T20129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.972475][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 444.979069][T15978] Bluetooth: hci3: command 0x040f tx timeout [ 444.982528][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.016357][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.025698][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.040815][T20129] device veth0_vlan entered promiscuous mode [ 445.052176][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.061479][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.077118][T20129] device veth1_vlan entered promiscuous mode [ 445.113494][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 445.122580][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 445.133807][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.144411][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.157859][T20129] device veth0_macvtap entered promiscuous mode [ 445.174842][T20129] device veth1_macvtap entered promiscuous mode [ 445.198713][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.212145][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.224531][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.236351][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.247403][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.259797][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.272918][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.284720][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.295773][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.315273][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.336754][T20129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.346067][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 445.364166][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 445.385683][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.397855][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.419873][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.443993][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.464280][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.478726][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.497658][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.508341][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.527232][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.537874][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.560641][T20129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 445.581456][T20129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.602217][T20129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.617492][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.630777][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.745465][ T432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.769548][ T432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.813720][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.843474][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.879133][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.889483][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.016439][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:25 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x12}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:25 executing program 4: io_setup(0x3, &(0x7f00000003c0)) io_setup(0x3, &(0x7f00000006c0)) 15:00:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) 15:00:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) 15:00:25 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 15:00:25 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0xfffffff7, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) [ 446.338483][T20353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:25 executing program 1: open$dir(0x0, 0x713200, 0x0) 15:00:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000180001"], 0xfc}}, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2a, 0x0, 0xfffffffffffffef9}}], 0x2, 0x0, 0x0) 15:00:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 15:00:25 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 446.500250][T20366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 15:00:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000b06010200000000000000000000000005000100060000000900020073797a300000000038000780"], 0x60}}, 0x0) [ 446.879121][T20366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:25 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x13}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf={0x40, &(0x7f0000000080)="0c18b2d672234ce9cd5d5a7121d8c6d6711be3a27414ece9ca0ecd73f15a931f047afcdb897ebf0477394050556cfdd8696b171436038202be2be19339369f9a"}) 15:00:25 executing program 2: syz_open_dev$rtc(0x0, 0x0, 0x0) 15:00:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 15:00:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7c) sendmsg$sock(r0, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x40093) 15:00:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000b06010200000000000000000000000005000100060000000900020073797a300000000038000780"], 0x60}}, 0x0) [ 447.049455][ T9552] Bluetooth: hci3: command 0x0419 tx timeout 15:00:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 15:00:25 executing program 5: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 15:00:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x8, 0x401}, 0xc) [ 447.092879][T20400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:25 executing program 0: 15:00:25 executing program 2: timer_create(0x8c0e91e2bb423af8, 0x0, &(0x7f0000000000)) 15:00:26 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="f14d179e160f", @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "405091", 0x8, 0x2c, 0x0, @empty, @mcast2, {[], "7e76530334150ac3"}}}}}, 0x0) 15:00:26 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x14}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:26 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getpeername$packet(r0, 0x0, 0x0) 15:00:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{}, "ba593fbbcd7e8b89", "7584c5f44c87d3c1361ab065ba70c7c8", "02b3fe79", "0a4519ebae9a669f"}, 0x28) 15:00:26 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 15:00:26 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) 15:00:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000180001"], 0xfc}}, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x2a, 0x0, 0xfffffffffffffef9}}], 0x2, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 447.483463][T20400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) [ 447.610803][T20427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:26 executing program 1: io_cancel(0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 15:00:26 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) 15:00:26 executing program 5: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:00:26 executing program 2: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000700)) 15:00:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 15:00:26 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x18}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:26 executing program 1: getgroups(0x1, &(0x7f0000000100)=[0x0]) 15:00:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 15:00:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 15:00:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)) 15:00:26 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7c) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x94, 0x4, '\x00S'}]}}}], 0x10}, 0x0) [ 447.968699][T20427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:26 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x1e) 15:00:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x80, 0x0}}], 0x1, 0x24008080) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20008000) [ 448.103414][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf) 15:00:27 executing program 5: openat$hwrng(0xffffff9c, &(0x7f0000002740)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 15:00:27 executing program 1: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x161001) 15:00:27 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x32) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x240}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a5c7f1f6d88b967487a4257357d803d7da6a13876ae1241ba7860ac5cf65ac60cded8974895abeaf4b4834ff922b3f1e0b0a3a07e758044ab4ea6f7ae55d8", 0xfe92, 0x20c49a, 0x0, 0x76) [ 448.455717][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:27 executing program 2: timer_create(0x0, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, &(0x7f0000000100)) 15:00:27 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 15:00:27 executing program 1: r0 = openat$fuse(0xffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 15:00:27 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x25}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:27 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x32) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x240}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a5c7f1f6d88b967487a4257357d803d7da6a13876ae1241ba7860ac5cf65ac60cded8974895abeaf4b4834ff922b3f1e0b0a3a07e758044ab4ea6f7ae55d8", 0xfe92, 0x20c49a, 0x0, 0x76) 15:00:27 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000280)) [ 448.587036][T20483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:27 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfffffffffffffff8}, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) [ 448.925403][T20483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:27 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 15:00:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, 0xe4) 15:00:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@private=0xa010101, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, 0xe4) 15:00:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x0, &(0x7f0000004c00)) recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001880)=""/131, 0x83}, {0x0}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x22, 0x0) sendto(r0, &(0x7f0000000000)="9c307370651eb9117f70c594276f475c354198a5fe4d78865f1f50c9462ae700c082eae6b4604f1a9ef0fbd2dbf3360b4267f07ecec9bd6ea1112133c8c06c7073e1a3cfda06110d878bc0d731cdaa91b7de7f74831d0a01ed9c06a8d2175daa5cae767ca7ab33970307b1d3de00def191aba66c4a9dd1f7dd85a82e929309791d1af97777854c317f509ee949ef1a9a7fb9b26f77b8e6540af6213189929b322b0482cc557eea3ed579023116c0b0f2855b193870e891dc4b193b458e33c095c95514254b6b07e5242a81998749b1e05b11beacf1d821b7a58034632438df13dba049b468ee959ec00d5d5d276e105e1451a04993f08bf527656e44b15cf78070cb9b4824ed509c3715d51bf1e04751d629a5762e528b767be0b99a33b8830658b6090691c5eda7785f8ec48f69ee074b33c837358a8c23a08a14266c50692752f440c0876bd8516b474717f6e134064502fddad73580e523a9e69929a44ed2e69a746025763fd6180bfeb35ae7c831ab5c035c00a07b3d339a67e6e6861a7424215260bd6f14e7765a22f802454480dc0f3bac3fe2cc6acbbe8da658c3e1baa54cea51e986083ef0672828a6333d87610c0f35229e1f4b95508d8bc13d38f18f2f609e0f060435c9c8187c170388bb454910cd92cbd71f65cc012c583ef37b822cff7f232fad9e490866a08bf0fc56eec3118e588acfc1e9681f4b56028ebceb8e62e2d38b886ad1922a963491835754a870d2f8d55fea94a9ed3a8b39748ccfcc25e4cc41794754fb02eb9f5c68b10b56e2db11690c02fc825a665d78bc4598accae38f483029da92013101b806f8a659e4100ed01584e6464cd221518cd136b97263f991460055e83e0d09700084147f4072ad9dfd9ff668d445dd41e888b49642b8bd50bb1a2e2f6d43da1c925cdc149f212a7adeb6f8978eeab86eb6b76180de16b350f053f68c95be730254989824c16d6ff487b6dbf70ffb3f04dd9a35d789b6e15535235246236b8ba02ec99c359bab3be1fde1ba71f7ab0f217da6d63fc08753defd577003b64a1b72d97234359c76370a83b8946a39ef332723275b7190670d42c8a53beb9a360c07f5131804c7d3cb6468d3830cd8b8caf5264dad69cebc3d00ba8415154375833d1ad09e8d7916bceef81fc7895f26247e6f4351550b4acaa708cd1059df81d46ed7d19639f65dd41b3d588e49d6b28ef93876c341a209fd5e6d4c99bb613eb269a363fadb2fa0b68507c2e00e8371c68c77593b1d86d2389b4575ff842d63aecc4933bc7dcd784349745ba44255d9934344e4511dd4278c02cc49fd40ae84cbec74fbb95f5bb64b333513fddc26bf63c2d43b330c85e6e4afca9fc1daaa69e2083688f6393489575c9368beba2d0aeda61452ebee96581a50c8743cdd69f9f054a25ab612ec006a1f49c915fdaa0e0dfd2c7fbf1f8686fc4048741fbd93e02270ae84346aa6b2052c8d5ef5c8765b7444f8854278a2d7d9cf99319b9c88f0bb53b16c96be376087151f205016429bb477b89cfc9d0d9c46698c41272d2aeb1620d55e0662e363d59a69f13630a53583622ac260f81bc9e95c850eebb9df0b4411508d1f34149ade5d4902f687f6ed7727f6722f1fc0fce12fcc5cbde2fa22ce2e3e83b01df9973b449d42f759eb8adc6a11e1e086615dc073724eeda5745791993bea3d352de2f8a186b3904912d0d558beabb52cc3544792338afc3cea2f2f6447e9ba747e3384e14ec007951f88abcb90ea1f39f2f1d91376c1972bfd07278403f0678a0fc0d3f806c10bcac72268a60b04da94289f515a733f55abbc1e106295c4a3808cf57a84f6236b2eb8d2e4ff0ae45cbd2187073a50e0a5193302fba20e94badd23deb8d7b154a29347981139fa88ac57468a3e856d902406615e0e8de9edd1981444a7ca2220ac611c5d123a4830cf96caf0a69d3fa4dcd066b13c797543c727cce62e5230091bc371a9016a5ffef6edf0529a99e25e173afc792b91f79400a9367dead94f93e51d091ea03e728fd8bb68c33f4312ae9cd6dabff8b43ba71ad6e43578fdcc0197c4580350ca10ff2cdf3e2b4165ee206ff288c52c78bbb887e4cc79d94f5414997faeb0bca7bd82064046b6ceca564d4535f9cd54f4fe4d67ecb2353a4d6f1b04ed05904a6b68540d3bb19bc29f420401ba4e930fdda2c564354b74d3866d701c7b6a1fe0e59dc9d1296771a54423b7fd16989ada1a88011e914679e49aa30e9ad22425a910f5f98251353d2f804bed310c8d38ecb493b09a9858b0aa884e838ece146f5b3a0ca90c581e1185ef3e41dd3f413ecdc1be7c9b7648cf1d34fc356d532cdaf634feb7bb6afea5b6c883cba5a4b32dfdb2d7f5bc2d4d7868bab932755ad6b0f0e42ef4320d457ce7761b77c00f081f3e769c79f2bc1f3d5ea83448de410c5e2223779ba036a0ce92fe0cb7ba77d09d14a1573034417a1c898b67e5a765dfffec31ebebd847e1aea9a6ab12f694a17cdffa2a6da000d881fb6c0c4ea630bfd63766d5ded3c84972a9ad9c5cc17945972a8656a5893b1eaa3d4952d24e138b24ebcd8858f2278a920707116aad06aa9a8328ce583d4f5ceb52f3052b4d1c9f43666b04a73b1082208c5b5c3a3997d94baaac005d8492110936364257b7f92ef5dff8b96e45c337a90b1ec8a32e4aed25d1f1ffb02a994e99957b13aa709512253ed8a51b39bdfe50096d14a14fa056287d04c9b995de49b67d671c265fe93cc566f73b834d02b78cfdd54ade39d7b8e43edad1008c4652ec460997c8d8dd6c1b5987a66b0fbcadc5db9e4d111844f348d797663ec36c1dce20c207277a2b21d20874a04d1d259414b66bea7f1fa4de0b91e3c5eb940ec4cb88f8399130ffb242ba5289032908c417c50d1aa82480f0b78a730df0b5b8fec27075ae34211a7c96613b858285c867600f2c69c1c4d6d8c69da6860f3dbea164e25c1babea5bb7664141aad59884062ab5a8404b6046eaf33764b86c94ed45bd6dfc7761283e2824b712010e99362ed3a8793a4312058c3ed282be1da490380b30798fe41f986ace0b6fbad1d9910af3deb83211c10830ed3fc6dac3ac7f36e2ebad7cae7473c6ff3873fe4b0acb1c7937c9544e32ec252879faa7d51ba5b362144b58d8ad4e46131f4a84de58ab57d7dc854a7408191c3adc180341e1588ccbfad7d3ba65441fe97dd64f21a9c112d396a48eadcb2e591e85df695c7b6b9dfccf709e5fdaf555cfefbfd8f7f9da8aac42a36ffaa0381ff1b857cb7cc0494622c0fa56f8e931de12db010fae27568790c07d2c68abf2b79138b96bb9c4ffe5f0eb77121026a4d5c5f788915e571e6c4a0a8d6f123f8bd797616cae4bd571060296c1f6e77c1f1d21590d438c35dd5fee6a0a5938da6ed552aa0db88b4ab7e06c1dfb4b88579d2a770b5bdab0452f233f1241e33cebca33edf6dac7f820357d5ce6e3e3802e604b9659446e15d32fa0c33e47e8b5464ebf71ac39d082de1bd453af79200c4761e104213369ec99534fbe80dcef87239a7418051ffaae78a644ec52ef2fba0a1a3e5a1381333cffdfa996390e78235abb6d9cee468fe500f378903bb3caed9a08f3c016c063b75f33f79bd2194ed73692da93aac1bf643e4bc6d1b5d96c47d80d5379785fc2db386d0f21c00d0c6e3ddd79b6aa4140d21b4424a852c8a5a794ccc4c005d80789de58149b5bd5f731b505b067a9bd74256c1ce9f542441f9f12f2ce92e9eb70d8539989cb10b16a1b686cc8a89567fef94534a0d064193e7a535604378e30903d53b118f09886bd105f3064c71e916a176fe693059b2dedcd97a331752fa1af607c275f3305272e44c7185383fb11b1020219ec0ebfb5a810f46e727683ad4869b80cef7dcceabd3212d49fb486df510d7dd15e7f370fc00e1f8d687f87bff0d340839a22a58501f0c23b087e21ed44e0bc35c29443b5bdec9721bba50fec929ab01c6cb0599002fcd9bf316dbabd957f5d12950be72bf2fb267da6fadd2e9f17109522a356ff4d7461f4472f927ba1a433c43909f893c771b35cc6f68cfa63ea942d18bb4ce07570d5eeeb499f6f3582f47c54e30bf935d2270ad59f2681b56dfff7c82b98b23fbfd731e387e9b467302299bc49c666a9544d477fb2a9a415254fccc4604d9082ee6d0ae83cf0f9e9543d38a10367aa97e4b535f55b4fb0f0c235dc319e930a402d596f3a92e1deec85d28229f6f5fc0fab63e43aad913f9ee7e06207571818ed837ecac11c833c38922198790c78187315d03c4cab0f6190963da01071c01a4bacd9537b5f5a4fb81109bde0810689062f500ed261c38f02180f5cf900db2b6b043a569267dfdf6f70b685701c2a799c4a5dbbc452a023aa2ed3acd116e8d7b216969a95ab19d8dd18be5582759386ba588e9f4e5bb1c6b8a084dd5b721871b7222d20f9b43d1cdf64dd0dbe546f16cd0f79c9ae0109032695b5ec1827fd59d16c64029e8060e6e6f3b8c6c97d0505f917cd2bab5be7ac8fa09e31bb7c57d2d4e731c6fd29f4ea77306a74741728f23816b731caed15f883c8ac51d4fcd95fdc4cea659c9e19c4d65cde1fd173e3b2aa521f2801237d52b63f1f5b4e3aa75f1877173b8ccf158f38e31b80326b70569340da8301504d13798c43398811933628d34534046a3c7a78ff7dd1a6ac9eaee8e34f0ac8aa000ab0343869f1e6a935cdcd47a491cd7275920431fb6ab9b6843c5f73adcd16152749277da5023c07e7acaf1efc6f4a32f13128ff312b0825a9e6d2a3ff1a1d6b09ab1d9b597827fb94767c93961e7048f6a674d647719e27d55d4e44e8c608a1cfb6908149be17e47113a7ceaa3768bf9f8284a74af80052f055f8e90bfc7cae00fef689db6a1f7d52795a0b155b3dd78851c365d73ab3101f438843f7bd8a2458d40c5e832fc1f89e630e04a27b6a5c4a7a77450134dff60e310457bf04c320ce31d554a64b6a252372818402b0ebd8e483d8d9dba514a051b365be96ee36742ab587b0e0e180fcf241014bc2bff24d3667b7c5e43df0bc2a1ade083b8f541b2d3caddbae6f3ab7dfdb4152899daa88ec9082b7625fe6e2b8e031b18252220d115c7267395383d2a308bb2935ca50524eb96ac0f6b27b547afc7cec6ba77fabc2886ec910a2ec237155bf251f5e756d231bb5db7cda7eb001c3c78b65f8e1004b0fb5d1d0484dc992d998a5d750a5e810406c15f165e89181bb706292fcd88c6acd56307861e0d70406ec937fb615548c18bc4c0c50fda537aa08fa5a700c048f29d6a0c04a5224c74271a93cacfaa603bcb2191cd79ed7c6addcd7b3a4846e83df2f645e283139c87a9606f53f65a906c2ea9c1d24506f1f3b3fad2f5e97986785220a9458fde67438e42cbcc0e221ec5b20fb25f809733509f83216afd4eacdff140899e1165099770443a4d9a918f1891acdac2253ed6131fa6954ad1afc3f2cafde059c0646fb2ff86c3e5267b245f578f39aa5c3da66e4e23e2b851764ccdbfca3490845b17d4d42b0f0d6e4fa24c1063f6fbc419b0b55a5c9edc95e7f1e58541ecc6283b47ece0b6c1d336a57925040b13c89fed205f24d4672ee65cc3138bd12172d6cd03d30da6dd1dd2fcabe92cd885c818789bdd6aaebae9c221f00a9b416c4334c911cb43e9f19cab903aa04ff1d125e7228821686596f454eca5d933dfbd734bc10ea6d7c860e1c6324f107877a5c5e7a218fc064a10271ee66a7fd4cc5073da1a3e87a4754086d3520ea2bea041fd5e4ecdc16d935291327c003a5b31744ddae6d48d7e529f32b16eb821d", 0x100f, 0x0, &(0x7f00000010c0)=@nfc={0x27, 0x1}, 0x80) 15:00:27 executing program 1: r0 = getpgrp(0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000080)) sched_rr_get_interval(r0, &(0x7f0000000040)) 15:00:27 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x63}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ffffffffffdd8250ab00e0ffffff050004e5000400000900020073797a3000f200000500010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) [ 449.140920][T20503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040080) 15:00:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)) 15:00:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7c) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000004"], 0x14}, 0x0) recvmmsg(r0, &(0x7f0000002900)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1}}], 0x1, 0x0, 0x0) 15:00:28 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000700)='i', 0x1, 0xfffffffffffffffe) 15:00:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000180001"], 0xfc}}, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 15:00:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) [ 449.370844][T20517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 15:00:28 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x10017}) 15:00:28 executing program 1: perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) 15:00:28 executing program 0: r0 = socket(0x1, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) [ 449.482372][T20503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006fa0cedb5e0125ebbcebdde510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b001d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294134000000000007000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73c683bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf070cd7bb2366fde4a594290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4e832b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e3eacd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c99c1301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece87f99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4d780000000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe007fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50e349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3545a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f76386f153633e28e1a5ccb7826e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e2209c96be662a51e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf41f0000003726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868c6da7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2a7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 15:00:28 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6d}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 449.758410][T20543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:28 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x10017}) 15:00:28 executing program 1: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 15:00:28 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f0000002740)='/dev/hwrng\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) 15:00:28 executing program 0: r0 = socket(0x1, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 15:00:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000500), 0x4) [ 450.125349][T20543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:29 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x4, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], '\x00'}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x94}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:00:29 executing program 4: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4083, 0xff3}], 0x3, 0x0, 0x3000000, 0x0) dup3(r1, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) 15:00:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000040)=""/62, 0x3e) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 15:00:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:29 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1239fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) 15:00:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000580)={{}, 0x0, 0x0, @unused=[0xfff, 0x0, 0x7, 0x5874], @subvolid}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 450.349565][T20562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.433277][T20569] input: syz1 as /devices/virtual/input/input11 15:00:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f000000a3c0)=[{0x0, 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x300, 0x0, 0x0) 15:00:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) syz_open_pts(r0, 0x0) [ 450.653882][T20569] input: syz1 as /devices/virtual/input/input12 [ 450.693865][T20562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 15:00:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x2}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000040)=""/62, 0x3e) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 15:00:29 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 450.956181][T20603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, 0x0, 0x384) [ 451.013167][T20604] input: syz1 as /devices/virtual/input/input13 [ 451.142959][T20609] input: syz1 as /devices/virtual/input/input14 [ 451.313234][T20603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 15:00:30 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 15:00:30 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 15:00:30 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 15:00:30 executing program 0: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAMEAT(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r2, r0, 0x0) tkill(r1, 0x1004000000013) 15:00:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:30 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd4) close(r0) setreuid(0xee01, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f00000001c0)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 451.854879][T20646] input: syz1 as /devices/virtual/input/input15 [ 451.882888][T20643] input: syz1 as /devices/virtual/input/input16 [ 451.972874][T20644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:30 executing program 1: socket(0x1, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 15:00:30 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x10017}) 15:00:30 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r1, 0x0, 0x9bd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r3, r1, 0x0) 15:00:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15:00:31 executing program 0: socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 15:00:31 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socket(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0xfffffffe) 15:00:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x61}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:00:31 executing program 2: perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = dup2(r0, r0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x8) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4a00014000"}) syz_open_pts(0xffffffffffffffff, 0x0) 15:00:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) 15:00:32 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x91de, 0x0, "4a00014000"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x10017}) [ 456.126696][ T432] device hsr_slave_0 left promiscuous mode [ 456.133492][ T432] device hsr_slave_1 left promiscuous mode [ 456.141712][ T432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.149992][ T432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.160558][ T432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.168564][ T432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.182411][ T432] device bridge_slave_1 left promiscuous mode [ 456.189265][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.202177][ T432] device bridge_slave_0 left promiscuous mode [ 456.208538][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.227030][ T432] device veth1_macvtap left promiscuous mode [ 456.233451][ T432] device veth0_macvtap left promiscuous mode [ 456.240701][ T432] device veth1_vlan left promiscuous mode [ 456.246759][ T432] device veth0_vlan left promiscuous mode [ 456.965814][T20744] IPVS: ftp: loaded support on port[0] = 21 [ 458.969336][T20080] Bluetooth: hci3: command 0x0409 tx timeout [ 461.059229][ T3128] Bluetooth: hci3: command 0x041b tx timeout [ 461.084192][ T432] team0 (unregistering): Port device team_slave_1 removed [ 461.100891][ T432] team0 (unregistering): Port device team_slave_0 removed [ 461.115587][ T432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.135573][ T432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.204610][ T432] bond0 (unregistering): Released all slaves [ 461.409097][T20744] chnl_net:caif_netlink_parms(): no params data found [ 461.473959][T20744] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.483577][T20744] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.497177][T20744] device bridge_slave_0 entered promiscuous mode [ 461.510950][T20744] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.522906][T20744] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.532621][T20744] device bridge_slave_1 entered promiscuous mode [ 461.558116][T20744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.572686][T20744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.605720][T20744] team0: Port device team_slave_0 added [ 461.621151][T20744] team0: Port device team_slave_1 added [ 461.644926][T20744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.654249][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.681947][T20744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.696475][T20744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.704108][T20744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.732419][T20744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.767561][T20744] device hsr_slave_0 entered promiscuous mode [ 461.775636][T20744] device hsr_slave_1 entered promiscuous mode [ 461.784766][T20744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.793635][T20744] Cannot create hsr debugfs directory [ 461.972494][T20744] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.979814][T20744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.987362][T20744] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.994815][T20744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.156505][T20744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.180095][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.190866][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.207046][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.234994][T20744] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.265949][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.285404][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.292587][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.326928][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.335670][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.342857][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.362433][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 462.373304][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.382707][T15978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.402049][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.411115][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.420180][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.429879][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.438354][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.454545][T20744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.472839][T20744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.483697][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.494228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.522171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.530637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.547973][T20744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.576965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.587608][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.618528][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.628246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.642551][T20744] device veth0_vlan entered promiscuous mode [ 462.662034][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.671159][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.691957][T20744] device veth1_vlan entered promiscuous mode [ 462.726757][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 462.735919][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 462.745064][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.754681][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.767474][T20744] device veth0_macvtap entered promiscuous mode [ 462.785574][T20744] device veth1_macvtap entered promiscuous mode [ 462.812179][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 462.831817][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.848283][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 462.869592][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.895721][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 462.915737][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.929787][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 462.948787][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.958634][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 462.980599][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.002269][T20744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.018304][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.037890][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.050303][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.060521][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.073799][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.086537][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.100045][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.112287][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.124541][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.136396][ T9789] Bluetooth: hci3: command 0x040f tx timeout [ 463.142751][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.155024][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.166835][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.178134][T20744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.198831][T20744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.224243][T20744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.237589][T20080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.249449][T20080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.448708][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.458282][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.487812][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.514728][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.523868][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.551168][ T9780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 463.644671][T20964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:42 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:42 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:00:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 15:00:42 executing program 2: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x10017}) 15:00:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f000000a3c0)=[{0x0, 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x300, 0x0, 0x0) 15:00:42 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x10017}) [ 463.957973][T20964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.071693][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 15:00:43 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 15:00:43 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:00:43 executing program 2: r0 = socket(0x1, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$unix(r2, 0x0, 0x0, 0x40840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 15:00:43 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x406000) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(r1, 0x2008001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 15:00:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x5, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], '\x00'}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @enum]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x8d}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 464.444373][T20973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x2}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) 15:00:43 executing program 0: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x10017}) 15:00:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 464.672370][T21011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:43 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, 'i,k', 0x10, 0x11, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 15:00:43 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x5, [@datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], '\x00'}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @enum]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x8d}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:00:43 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 15:00:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@cgroup=r0, r1, 0x2}, 0x10) 15:00:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) [ 465.050360][T21011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="b706f618e2da2557a9d2291d84b5ccc2d7c94186325df4fb335b", 0x1a}, {&(0x7f00000003c0)="f4fd7b95a3a6f2b3a164b55b54a0", 0xe}], 0x2}}], 0x1, 0x0) [ 465.209221][ T9789] Bluetooth: hci3: command 0x0419 tx timeout [ 465.342970][T21017] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 465.420832][T21017] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:00:45 executing program 4: ftruncate(0xffffffffffffffff, 0x40204) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x4}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008c40) r3 = dup(0xffffffffffffffff) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) 15:00:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 15:00:45 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000800)=""/55, 0x37) 15:00:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) [ 466.274597][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.484804][T21042] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 466.520353][T21042] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:00:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0x14, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 15:00:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) 15:00:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x209700, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 466.631687][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x3}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5424, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/13, 0xd) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) 15:00:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) 15:00:45 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8001200, 0x0, 0x0, 0x0, &(0x7f0000000600)) [ 466.872153][T21077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:45 executing program 4: socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./bus\x00', 0xce040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x1fffffffffffffff) 15:00:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r2 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @array, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fd"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @volatile, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xb0}, 0x20) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 467.207144][T21089] ptrace attach of "/root/syz-executor.2"[21088] was attempted by "/root/syz-executor.2"[21089] [ 467.232901][T21077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:46 executing program 5: pipe(0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x70) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x118, 0x40880}, 0x20008040) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff75}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x42c) 15:00:46 executing program 1: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x0, 0x0) 15:00:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000068000100000000000000000000000000000000000c0002000000000020010000080001"], 0x2c}}, 0x0) 15:00:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0xc}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c575) fcntl$setsig(0xffffffffffffffff, 0xa, 0x14) semget$private(0x0, 0x0, 0x0) 15:00:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5424, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) 15:00:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @array, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fd"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @volatile, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xb0}, 0x20) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 467.610377][T21106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.630316][T21108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:00:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0xa02, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) 15:00:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 15:00:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x74}, 0x20) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 467.811896][T21122] ptrace attach of "/root/syz-executor.2"[21119] was attempted by "/root/syz-executor.2"[21122] 15:00:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000a10200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000c100000000000000000000000000000000000000000000f3000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f73653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faff00000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000040000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) [ 467.963663][T21106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.983206][T21129] ptrace attach of "/root/syz-executor.2"[21128] was attempted by "/root/syz-executor.2"[21129] 15:00:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x20) close(r0) 15:00:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 15:00:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:00:47 executing program 4: pipe(0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x70) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3a98, 0x0, 0x53) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00,\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x118, 0x40880}, 0x20008040) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x0, 0x0) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x42c) 15:00:47 executing program 2: pipe(0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x824b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x70) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYRES32], 0x118, 0x40880}, 0x20008040) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x42c) 15:00:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) keyctl$invalidate(0x15, 0x0) 15:00:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) [ 468.544475][T21147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:00:47 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8001200, 0x0, &(0x7f0000000180), 0x0, 0x0) 15:00:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 15:00:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 468.870875][T21147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.880009][T21167] ptrace attach of "/root/syz-executor.5"[21166] was attempted by "/root/syz-executor.5"[21167] 15:00:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000853c000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x52) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400080000000000eb8a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x0) 15:00:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 469.071367][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:00:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, 0x0) [ 469.149766][T21201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.188339][T21183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.224272][T21183] bond1: (slave vlan2): Error -34 calling dev_set_mtu 15:00:48 executing program 1: 15:00:48 executing program 4: 15:00:48 executing program 2: 15:00:48 executing program 1: [ 470.350786][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 474.036471][T21262] IPVS: ftp: loaded support on port[0] = 21 [ 475.134976][T21262] chnl_net:caif_netlink_parms(): no params data found [ 475.308970][ T29] device hsr_slave_0 left promiscuous mode [ 475.333035][ T29] device hsr_slave_1 left promiscuous mode [ 475.360445][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.367879][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.397398][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.407852][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.428415][ T29] device bridge_slave_1 left promiscuous mode [ 475.437773][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.461553][ T29] device bridge_slave_0 left promiscuous mode [ 475.467793][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.496393][ T29] device veth1_macvtap left promiscuous mode [ 475.509561][ T29] device veth0_macvtap left promiscuous mode [ 475.515660][ T29] device veth1_vlan left promiscuous mode [ 475.534124][ T29] device veth0_vlan left promiscuous mode 15:00:54 executing program 0: 15:00:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x91, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x10000) 15:00:54 executing program 2: chdir(0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:00:54 executing program 1: 15:00:54 executing program 5: 15:00:54 executing program 5: [ 476.008904][ T9552] Bluetooth: hci3: command 0x0409 tx timeout [ 478.088902][ T9780] Bluetooth: hci3: command 0x041b tx timeout [ 480.178978][ T9780] Bluetooth: hci3: command 0x040f tx timeout [ 481.212490][ T29] team0 (unregistering): Port device team_slave_1 removed [ 481.228372][ T29] team0 (unregistering): Port device team_slave_0 removed [ 481.244953][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.258993][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.335261][ T29] bond0 (unregistering): Released all slaves [ 481.412664][T21262] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.420083][T21262] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.427843][T21262] device bridge_slave_0 entered promiscuous mode [ 481.441673][T21262] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.450214][T21262] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.457991][T21262] device bridge_slave_1 entered promiscuous mode [ 481.492360][T21262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.505195][T21262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.545446][T21262] team0: Port device team_slave_0 added [ 481.554810][T21262] team0: Port device team_slave_1 added [ 481.574680][T21262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.582407][T21262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.618872][T21262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.636387][T21262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.643456][T21262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.669499][T21262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.704708][T21262] device hsr_slave_0 entered promiscuous mode [ 481.711549][T21262] device hsr_slave_1 entered promiscuous mode [ 481.718745][T21262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.729884][T21262] Cannot create hsr debugfs directory [ 481.883347][T21262] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.890524][T21262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.897936][T21262] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.905125][T21262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.034631][T21262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.055049][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.063912][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.074865][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 482.100965][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.109778][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.122179][T21262] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.142129][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.151063][ T3128] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.158206][ T3128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.189886][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.198455][ T3128] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.205707][ T3128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.232188][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.242871][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.268114][T21262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.280527][T20080] Bluetooth: hci3: command 0x0419 tx timeout [ 482.287026][T21262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.304211][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.314514][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.324490][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.351165][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.362387][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.370002][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.391237][T21262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.422553][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.436112][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.475677][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.486648][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.503096][T21262] device veth0_vlan entered promiscuous mode [ 482.515156][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.529682][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.546309][T21262] device veth1_vlan entered promiscuous mode [ 482.582369][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.592044][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.602921][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.613373][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.627309][T21262] device veth0_macvtap entered promiscuous mode [ 482.645310][T21262] device veth1_macvtap entered promiscuous mode [ 482.670852][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.681769][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.694595][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.707960][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.719929][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.732518][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.746409][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.758649][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.773456][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 482.785920][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.800470][T21262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.809707][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.817969][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.831458][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.842622][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.856645][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.873948][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.886557][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.899287][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.910897][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.925283][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.936979][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.949555][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.961196][T21262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 482.973881][T21262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.989312][T21262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.000319][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.013652][ T9789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.181552][T21180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.208661][T21180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.258679][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.292288][T21180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.301612][T21180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.327652][ T2999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.449914][T21509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.775394][T21509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:02 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:02 executing program 1: 15:01:02 executing program 4: 15:01:02 executing program 2: 15:01:02 executing program 0: 15:01:02 executing program 5: 15:01:02 executing program 2: 15:01:02 executing program 5: 15:01:02 executing program 0: 15:01:02 executing program 1: 15:01:02 executing program 4: [ 483.978108][T21516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:02 executing program 2: [ 484.333807][T21516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:03 executing program 0: 15:01:03 executing program 5: 15:01:03 executing program 1: 15:01:03 executing program 4: 15:01:03 executing program 2: 15:01:03 executing program 0: 15:01:03 executing program 5: 15:01:03 executing program 2: 15:01:03 executing program 4: 15:01:03 executing program 1: [ 484.536117][T21533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:03 executing program 0: [ 484.916232][T21533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:03 executing program 1: 15:01:03 executing program 2: 15:01:03 executing program 5: 15:01:03 executing program 4: 15:01:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:03 executing program 0: 15:01:03 executing program 1: 15:01:03 executing program 0: 15:01:03 executing program 2: 15:01:03 executing program 4: 15:01:03 executing program 5: [ 485.075463][T21551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:04 executing program 0: 15:01:04 executing program 1: 15:01:04 executing program 2: 15:01:04 executing program 4: 15:01:04 executing program 5: [ 485.427326][T21551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:04 executing program 2: 15:01:04 executing program 0: 15:01:04 executing program 1: 15:01:04 executing program 4: 15:01:04 executing program 5: 15:01:04 executing program 4: 15:01:04 executing program 2: 15:01:04 executing program 0: 15:01:04 executing program 1: 15:01:04 executing program 5: [ 485.661075][T21571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:04 executing program 2: 15:01:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:04 executing program 4: 15:01:04 executing program 5: 15:01:04 executing program 1: 15:01:04 executing program 0: 15:01:04 executing program 2: [ 486.052450][T21571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:05 executing program 4: 15:01:05 executing program 5: 15:01:05 executing program 1: 15:01:05 executing program 0: 15:01:05 executing program 2: [ 486.206231][T21588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:01:05 executing program 2: 15:01:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 15:01:05 executing program 4: 15:01:05 executing program 0: 15:01:05 executing program 5: 15:01:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@getsa={0x108, 0x12, 0x813, 0x0, 0x0, {@in6=@loopback}, [@sa={0xe0, 0x6, {{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@rand_addr=' \x01\x00'}, @in=@empty}}]}, 0x108}}, 0x0) 15:01:05 executing program 2: [ 486.563361][T21588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.638308][T21603] ================================================================== [ 486.646800][T21603] BUG: KASAN: slab-out-of-bounds in xfrm_attr_cpy32+0x15a/0x1d0 [ 486.654450][T21603] Write of size 4 at addr ffff8880139d510c by task syz-executor.1/21603 [ 486.662774][T21603] [ 486.665120][T21603] CPU: 0 PID: 21603 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 486.673884][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.684035][T21603] Call Trace: [ 486.687346][T21603] dump_stack+0x107/0x163 [ 486.691711][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 486.696683][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 486.701640][T21603] print_address_description.constprop.0.cold+0xae/0x4c8 [ 486.708704][T21603] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 486.714094][T21603] ? vprintk_func+0x95/0x1e0 [ 486.718698][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 486.723643][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 486.728613][T21603] kasan_report.cold+0x1f/0x37 [ 486.733401][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 486.738364][T21603] check_memory_region+0x13d/0x180 [ 486.743496][T21603] memset+0x20/0x40 [ 486.747321][T21603] xfrm_attr_cpy32+0x15a/0x1d0 [ 486.752112][T21603] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 486.757768][T21603] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 486.763077][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 486.769113][T21603] ? security_capable+0x8f/0xc0 [ 486.773997][T21603] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 486.779302][T21603] xfrm_user_rcv_msg+0x55b/0x8b0 [ 486.784272][T21603] ? xfrm_do_migrate+0x800/0x800 [ 486.789226][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 486.795332][T21603] ? lock_release+0x710/0x710 [ 486.800021][T21603] ? __local_bh_enable_ip+0x9c/0x110 [ 486.805333][T21603] ? __mutex_lock+0x626/0x10e0 [ 486.810117][T21603] netlink_rcv_skb+0x153/0x420 [ 486.814921][T21603] ? xfrm_do_migrate+0x800/0x800 [ 486.819870][T21603] ? netlink_ack+0xaa0/0xaa0 [ 486.824518][T21603] xfrm_netlink_rcv+0x6b/0x90 [ 486.829208][T21603] netlink_unicast+0x533/0x7d0 [ 486.833993][T21603] ? netlink_attachskb+0x810/0x810 [ 486.839204][T21603] ? __phys_addr_symbol+0x2c/0x70 [ 486.844255][T21603] ? __check_object_size+0x171/0x3f0 [ 486.849655][T21603] netlink_sendmsg+0x856/0xd90 [ 486.854438][T21603] ? netlink_unicast+0x7d0/0x7d0 [ 486.859408][T21603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 486.864791][T21603] ? netlink_unicast+0x7d0/0x7d0 [ 486.869766][T21603] sock_sendmsg+0xcf/0x120 [ 486.874198][T21603] ____sys_sendmsg+0x6e8/0x810 [ 486.878986][T21603] ? kernel_sendmsg+0x50/0x50 [ 486.883701][T21603] ? do_recvmmsg+0x6c0/0x6c0 [ 486.888312][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 486.894312][T21603] ___sys_sendmsg+0xf3/0x170 [ 486.899879][T21603] ? sendmsg_copy_msghdr+0x160/0x160 [ 486.905179][T21603] ? __fget_files+0x272/0x400 [ 486.909873][T21603] ? lock_downgrade+0x6d0/0x6d0 [ 486.914754][T21603] ? find_held_lock+0x2d/0x110 [ 486.919561][T21603] ? __fget_files+0x294/0x400 [ 486.924350][T21603] ? __fget_light+0xea/0x280 [ 486.928961][T21603] __sys_sendmsg+0xe5/0x1b0 [ 486.933476][T21603] ? __sys_sendmsg_sock+0xb0/0xb0 [ 486.938532][T21603] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 486.945140][T21603] __do_fast_syscall_32+0x56/0x80 [ 486.950177][T21603] do_fast_syscall_32+0x2f/0x70 [ 486.955043][T21603] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 486.961387][T21603] RIP: 0023:0xf7fde549 [ 486.965485][T21603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 15:01:05 executing program 2: 15:01:05 executing program 5: 15:01:05 executing program 4: [ 486.985102][T21603] RSP: 002b:00000000f55d80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 486.985763][T21608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.993534][T21603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 486.993572][T21603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.993582][T21603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.993593][T21603] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 486.993602][T21603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.993629][T21603] [ 487.045589][T21603] Allocated by task 21603: [ 487.050048][T21603] kasan_save_stack+0x1b/0x40 [ 487.054759][T21603] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 487.060549][T21603] kvmalloc_node+0x61/0xf0 [ 487.064984][T21603] xfrm_user_rcv_msg_compat+0x3cd/0x1040 [ 487.070653][T21603] xfrm_user_rcv_msg+0x55b/0x8b0 [ 487.075604][T21603] netlink_rcv_skb+0x153/0x420 [ 487.080552][T21603] xfrm_netlink_rcv+0x6b/0x90 [ 487.085242][T21603] netlink_unicast+0x533/0x7d0 15:01:05 executing program 5: [ 487.090017][T21603] netlink_sendmsg+0x856/0xd90 [ 487.095249][T21603] sock_sendmsg+0xcf/0x120 [ 487.099679][T21603] ____sys_sendmsg+0x6e8/0x810 [ 487.105324][T21603] ___sys_sendmsg+0xf3/0x170 [ 487.110275][T21603] __sys_sendmsg+0xe5/0x1b0 [ 487.114792][T21603] __do_fast_syscall_32+0x56/0x80 [ 487.120189][T21603] do_fast_syscall_32+0x2f/0x70 [ 487.125167][T21603] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.131496][T21603] [ 487.133833][T21603] The buggy address belongs to the object at ffff8880139d5000 [ 487.133833][T21603] which belongs to the cache kmalloc-512 of size 512 [ 487.148052][T21603] The buggy address is located 268 bytes inside of [ 487.148052][T21603] 512-byte region [ffff8880139d5000, ffff8880139d5200) [ 487.161331][T21603] The buggy address belongs to the page: [ 487.166977][T21603] page:000000009af648af refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x139d4 [ 487.177139][T21603] head:000000009af648af order:2 compound_mapcount:0 compound_pincount:0 [ 487.185788][T21603] flags: 0xfff00000010200(slab|head) 15:01:06 executing program 5: [ 487.191466][T21603] raw: 00fff00000010200 ffffea0000606d00 0000000400000004 ffff888010041280 [ 487.200152][T21603] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 487.208768][T21603] page dumped because: kasan: bad access detected [ 487.215200][T21603] [ 487.217557][T21603] Memory state around the buggy address: [ 487.223198][T21603] ffff8880139d5000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.231271][T21603] ffff8880139d5080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.239613][T21603] >ffff8880139d5100: 00 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.247727][T21603] ^ [ 487.252063][T21603] ffff8880139d5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.260136][T21603] ffff8880139d5200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.268229][T21603] ================================================================== [ 487.276321][T21603] Disabling lock debugging due to kernel taint 15:01:06 executing program 0: [ 487.310180][T21608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.336369][T21603] Kernel panic - not syncing: panic_on_warn set ... [ 487.342990][T21603] CPU: 0 PID: 21603 Comm: syz-executor.1 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 487.353137][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.363192][T21603] Call Trace: [ 487.366492][T21603] dump_stack+0x107/0x163 [ 487.370833][T21603] ? xfrm_attr_cpy32+0xa0/0x1d0 [ 487.375720][T21603] panic+0x306/0x73d [ 487.379621][T21603] ? __warn_printk+0xf3/0xf3 [ 487.384217][T21603] ? preempt_schedule_common+0x59/0xc0 [ 487.389678][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 487.394620][T21603] ? preempt_schedule_thunk+0x16/0x18 [ 487.400481][T21603] ? trace_hardirqs_on+0x51/0x1c0 [ 487.405505][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 487.410703][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 487.415640][T21603] end_report+0x58/0x5e [ 487.419800][T21603] kasan_report.cold+0xd/0x37 [ 487.424564][T21603] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 487.429859][T21603] check_memory_region+0x13d/0x180 [ 487.434972][T21603] memset+0x20/0x40 [ 487.438786][T21603] xfrm_attr_cpy32+0x15a/0x1d0 [ 487.443822][T21603] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 487.449459][T21603] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 487.454744][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 487.460741][T21603] ? security_capable+0x8f/0xc0 [ 487.465585][T21603] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 487.471047][T21603] xfrm_user_rcv_msg+0x55b/0x8b0 [ 487.475976][T21603] ? xfrm_do_migrate+0x800/0x800 [ 487.480918][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 487.487001][T21603] ? lock_release+0x710/0x710 [ 487.491673][T21603] ? __local_bh_enable_ip+0x9c/0x110 [ 487.497057][T21603] ? __mutex_lock+0x626/0x10e0 [ 487.502595][T21603] netlink_rcv_skb+0x153/0x420 [ 487.507355][T21603] ? xfrm_do_migrate+0x800/0x800 [ 487.512285][T21603] ? netlink_ack+0xaa0/0xaa0 [ 487.517942][T21603] xfrm_netlink_rcv+0x6b/0x90 [ 487.522638][T21603] netlink_unicast+0x533/0x7d0 [ 487.527396][T21603] ? netlink_attachskb+0x810/0x810 [ 487.532499][T21603] ? __phys_addr_symbol+0x2c/0x70 [ 487.537515][T21603] ? __check_object_size+0x171/0x3f0 [ 487.542794][T21603] netlink_sendmsg+0x856/0xd90 [ 487.547557][T21603] ? netlink_unicast+0x7d0/0x7d0 [ 487.552488][T21603] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 487.557764][T21603] ? netlink_unicast+0x7d0/0x7d0 [ 487.562707][T21603] sock_sendmsg+0xcf/0x120 [ 487.567128][T21603] ____sys_sendmsg+0x6e8/0x810 [ 487.571897][T21603] ? kernel_sendmsg+0x50/0x50 [ 487.576578][T21603] ? do_recvmmsg+0x6c0/0x6c0 [ 487.581166][T21603] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 487.587137][T21603] ___sys_sendmsg+0xf3/0x170 [ 487.591720][T21603] ? sendmsg_copy_msghdr+0x160/0x160 [ 487.597021][T21603] ? __fget_files+0x272/0x400 [ 487.601778][T21603] ? lock_downgrade+0x6d0/0x6d0 [ 487.606618][T21603] ? find_held_lock+0x2d/0x110 [ 487.611399][T21603] ? __fget_files+0x294/0x400 [ 487.616068][T21603] ? __fget_light+0xea/0x280 [ 487.620736][T21603] __sys_sendmsg+0xe5/0x1b0 [ 487.625233][T21603] ? __sys_sendmsg_sock+0xb0/0xb0 [ 487.630281][T21603] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 487.636883][T21603] __do_fast_syscall_32+0x56/0x80 [ 487.641911][T21603] do_fast_syscall_32+0x2f/0x70 [ 487.646789][T21603] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 487.653197][T21603] RIP: 0023:0xf7fde549 [ 487.657263][T21603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 487.676864][T21603] RSP: 002b:00000000f55d80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 487.685283][T21603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 487.693435][T21603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.701403][T21603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.709372][T21603] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 487.717346][T21603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.725354][T21603] Kernel Offset: disabled [ 487.729668][T21603] Rebooting in 86400 seconds..